@togglhq/cli 1.7.1 → 1.8.0

package/README.md

@@ -290,6 +290,18 @@ TOGGL_DEBUG=1 toggl tasks list
 
 Prints schema validation warnings from API responses to stderr.
 
+## Privacy & analytics
+
+Public builds may send product analytics: command path, the leaf command as `action`, outcome (`success` or `error`), client, session id and package version. Command arguments and output are never collected. Signed-in sessions are identified by your Toggl account id so repeat use is not counted as a new person each time; unauthenticated processes stay anonymous.
+
+Disable product analytics:
+
+```bash
+TOGGL_PRODUCT_ANALYTICS=off
+```
+
+Optional error reporting via Sentry is off unless you set `TOGGL_SENTRY=1` and `SENTRY_DSN`.
+
 ## License
 
 Proprietary Toggl software. See [LICENSE](LICENSE) and [Toggl legal terms](https://toggl.com/legal/).

package/build/cli.js

@@ -1,11 +1,19 @@
 #!/usr/bin/env node
-import { n as CommanderError, t as createProgram } from "./program-BJrl7qqO.js";
+import { a as CommanderError, i as shutdownCliTelemetry, n as captureCliException, r as initCliTelemetry, t as createProgram } from "./program-B6EuV2vO.js";
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
 //#region src/cli.ts
+const CLI_PACKAGE_VERSION = JSON.parse(readFileSync(join(dirname(fileURLToPath(import.meta.url)), "../package.json"), "utf-8")).version;
+initCliTelemetry(CLI_PACKAGE_VERSION);
 try {
 	await createProgram({ enableUpdateNotification: true }).parseAsync(process.argv);
 } catch (error) {
+	captureCliException(error);
 	if (error instanceof CommanderError) process.exit(error.exitCode);
 	throw error;
+} finally {
+	await shutdownCliTelemetry();
 }
 //#endregion
 export {};

package/build/index.js

@@ -1,2 +1,2 @@
-import { t as createProgram } from "./program-BJrl7qqO.js";
+import { t as createProgram } from "./program-B6EuV2vO.js";
 export { createProgram };

package/build/{program-BJrl7qqO.js → program-B6EuV2vO.js}

@@ -10,12 +10,13 @@ import { AsyncLocalStorage, AsyncResource } from "node:async_hooks";
 import { stripVTControlCharacters, styleText } from "node:util";
 import * as readline from "node:readline";
 import * as os from "node:os";
-import * as crypto from "node:crypto";
+import * as crypto$1 from "node:crypto";
 import * as fs from "node:fs/promises";
 import { mkdir, readFile, stat, writeFile } from "node:fs/promises";
 import { createInterface } from "node:readline/promises";
 import * as http from "node:http";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
+import * as Sentry from "@sentry/node";
 //#region \0rolldown/runtime.js
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -10811,7 +10812,7 @@ const PublicMeEntryRequestSchema = /* @__PURE__ */ object$2({
 	]))
 });
 //#endregion
-//#region ../../node_modules/.pnpm/@toggl+queries@2.1.212_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_d4c0aa64421be7eab39751554cfd6b93/node_modules/@toggl/queries/dist/org/invitation/requests.mjs
+//#region ../../node_modules/.pnpm/@toggl+queries@2.1.216_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_8e2551e0eda340359e00ca954b6e5013/node_modules/@toggl/queries/dist/org/invitation/requests.mjs
 async function getInvitations(httpClient, signal) {
 	return (await httpClient.get(`invitations`, { signal })).json();
 }
@@ -10828,7 +10829,7 @@ async function resendInvitation(httpClient, organization_id, organization_user_i
 	return (await httpClient.post(`organizations/${organization_id}/invitations/${organization_user_id}/resend`, { signal })).json();
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@toggl+queries@2.1.212_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_d4c0aa64421be7eab39751554cfd6b93/node_modules/@toggl/queries/dist/org/utils/requests.mjs
+//#region ../../node_modules/.pnpm/@toggl+queries@2.1.216_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_8e2551e0eda340359e00ca954b6e5013/node_modules/@toggl/queries/dist/org/utils/requests.mjs
 function buildSearchParams$1(params, flattenArrays = false) {
 	const searchParams = new URLSearchParams();
 	Object.entries(params).forEach(([key, value]) => {
@@ -10840,7 +10841,7 @@ function buildSearchParams$1(params, flattenArrays = false) {
 	return searchParams;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@toggl+queries@2.1.212_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_d4c0aa64421be7eab39751554cfd6b93/node_modules/@toggl/queries/dist/org/organization-user/requests.mjs
+//#region ../../node_modules/.pnpm/@toggl+queries@2.1.216_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_8e2551e0eda340359e00ca954b6e5013/node_modules/@toggl/queries/dist/org/organization-user/requests.mjs
 async function getOrganizationUser(httpClient, organization_id, organization_user_id, signal) {
 	return (await httpClient.get(`organizations/${organization_id}/users/${organization_user_id}`, { signal })).json();
 }
@@ -10854,7 +10855,7 @@ async function patchOrganizationUserActive(httpClient, organization_id, organiza
 	return (await httpClient.patch(`organizations/${organization_id}/users/${organization_user_id}/active_status/${status}`, { signal })).json();
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@toggl+queries@2.1.212_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_d4c0aa64421be7eab39751554cfd6b93/node_modules/@toggl/queries/dist/org/workspace/requests.mjs
+//#region ../../node_modules/.pnpm/@toggl+queries@2.1.216_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_8e2551e0eda340359e00ca954b6e5013/node_modules/@toggl/queries/dist/org/workspace/requests.mjs
 async function getWorkspaces(httpClient, organization_id, signal) {
 	return (await httpClient.get(`organizations/${organization_id}/workspaces`, { signal })).json();
 }
@@ -10874,7 +10875,7 @@ const WorkingHoursUpdateInputSchema = /* @__PURE__ */ object$2({
 });
 const StatusOKSchema = /* @__PURE__ */ object$2({ status: /* @__PURE__ */ string$1() });
 //#endregion
-//#region ../../node_modules/.pnpm/@toggl+queries@2.1.212_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_d4c0aa64421be7eab39751554cfd6b93/node_modules/@toggl/queries/dist/shared-data/utils/requests.mjs
+//#region ../../node_modules/.pnpm/@toggl+queries@2.1.216_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_8e2551e0eda340359e00ca954b6e5013/node_modules/@toggl/queries/dist/shared-data/utils/requests.mjs
 const META_SYMBOL = Symbol.for("querygen:response:meta");
 function withResponseMeta(data, headers, status) {
 	if (!data) return data;
@@ -10901,7 +10902,7 @@ function buildSearchParams(params, flattenArrays = false) {
 	return searchParams;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@toggl+queries@2.1.212_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_d4c0aa64421be7eab39751554cfd6b93/node_modules/@toggl/queries/dist/shared-data/public-holidays/requests.mjs
+//#region ../../node_modules/.pnpm/@toggl+queries@2.1.216_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_8e2551e0eda340359e00ca954b6e5013/node_modules/@toggl/queries/dist/shared-data/public-holidays/requests.mjs
 async function getPublicHolidays(httpClient, year, { country, organization_id } = {}, signal) {
 	const response = await httpClient.get(`shared_data/api/publicholidays/${year}`, {
 		signal,
@@ -10913,12 +10914,12 @@ async function getPublicHolidays(httpClient, year, { country, organization_id }
 	return withResponseMeta(await response.json(), response.headers, response.status);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@toggl+queries@2.1.212_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_d4c0aa64421be7eab39751554cfd6b93/node_modules/@toggl/queries/dist/shared-data/status/requests.mjs
+//#region ../../node_modules/.pnpm/@toggl+queries@2.1.216_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_8e2551e0eda340359e00ca954b6e5013/node_modules/@toggl/queries/dist/shared-data/status/requests.mjs
 async function getStatus(httpClient, signal) {
 	return (await httpClient.get(`shared_data/api/status`, { signal })).json();
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@toggl+queries@2.1.212_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_d4c0aa64421be7eab39751554cfd6b93/node_modules/@toggl/queries/dist/org/timeoff/requests.mjs
+//#region ../../node_modules/.pnpm/@toggl+queries@2.1.216_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_8e2551e0eda340359e00ca954b6e5013/node_modules/@toggl/queries/dist/org/timeoff/requests.mjs
 async function timeoffListMyEntries(httpClient, organization_id, { from, to }, signal) {
 	return (await httpClient.get(`timeoff/organizations/${organization_id}/me`, {
 		signal,
@@ -10946,7 +10947,7 @@ async function timeoffDeleteMyEntry(httpClient, organization_id, id, signal) {
 	return response.json();
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@toggl+queries@2.1.212_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_d4c0aa64421be7eab39751554cfd6b93/node_modules/@toggl/queries/dist/shared-data/working-hours/requests.mjs
+//#region ../../node_modules/.pnpm/@toggl+queries@2.1.216_@tanstack+react-query@5.99.0_react@19.2.5__@toggl+sync@0.2.4_rea_8e2551e0eda340359e00ca954b6e5013/node_modules/@toggl/queries/dist/shared-data/working-hours/requests.mjs
 async function getMyWorkingHours(httpClient, organization_id, signal) {
 	return (await httpClient.get(`shared_data/api/workinghours/${organization_id}/me`, { signal })).json();
 }
@@ -10970,6 +10971,14 @@ async function deleteMyWorkingHours(httpClient, organization_id, data, signal) {
 	if ([204, 205].includes(response.status)) return null;
 	return response.json();
 }
+//#endregion
+//#region ../cli-core/build/focus-client-B2l1BZIW.js
+/** Request header the API reads to attribute traffic to MCP or CLI. */
+const TOGGL_CLIENT_HEADER = "X-Toggl-Client";
+/** Headers that attribute a raw `fetch` to MCP or CLI (FocusClient sets these itself). */
+function togglClientHeaders(clientSurface) {
+	return { [TOGGL_CLIENT_HEADER]: clientSurface };
+}
 const customFieldValuesEntry = /* @__PURE__ */ optional$1(/* @__PURE__ */ nullable$1(/* @__PURE__ */ pipe$2(/* @__PURE__ */ record$1(/* @__PURE__ */ string$1(), /* @__PURE__ */ nullable$1(/* @__PURE__ */ union([
 	/* @__PURE__ */ array$1(/* @__PURE__ */ number$2()),
 	/* @__PURE__ */ string$1(),
@@ -11147,6 +11156,7 @@ var FocusClient = class {
 	timeOffMeHttp;
 	sharedDataHttp;
 	tokenProvider;
+	clientSurface;
 	userId;
 	organizationIdNum;
 	workspaceId;
@@ -11155,6 +11165,7 @@ var FocusClient = class {
 		let baseUrl = config.baseUrl.replace(/\/+$/, "");
 		if (!baseUrl.endsWith("/api")) baseUrl += "/api";
 		this.tokenProvider = config.tokenProvider;
+		this.clientSurface = config.clientSurface;
 		this.userId = config.userId;
 		this.workspaceId = config.workspaceId;
 		const orgParsed = Number.parseInt(config.organizationId, 10);
@@ -11170,6 +11181,7 @@ var FocusClient = class {
 				request.headers.set("Authorization", `Bearer ${token}`);
 				if (!request.headers.get("Content-Type")?.startsWith("multipart/form-data")) request.headers.set("Content-Type", "application/json");
 				request.headers.set("X-Toggl-PostHog-Data", JSON.stringify({ platform_origin: "web" }));
+				request.headers.set(TOGGL_CLIENT_HEADER, this.clientSurface);
 			}
 		});
 		const orgBase = accountsOrgApiBaseUrl(config.accountsApiUrl);
@@ -11181,6 +11193,7 @@ var FocusClient = class {
 				request.headers.set("Authorization", `Bearer ${token}`);
 				request.headers.set("Content-Type", "application/json");
 				request.headers.set("X-Toggl-PostHog-Data", JSON.stringify({ platform_origin: "web" }));
+				request.headers.set(TOGGL_CLIENT_HEADER, this.clientSurface);
 			}
 		});
 		this.timeOffMeHttp = createHttpClient({
@@ -11192,6 +11205,7 @@ var FocusClient = class {
 				request.headers.set("Content-Type", "application/json");
 				request.headers.set("X-Toggl-Product", "focus");
 				request.headers.set("X-Toggl-PostHog-Data", JSON.stringify({ platform_origin: "web" }));
+				request.headers.set(TOGGL_CLIENT_HEADER, this.clientSurface);
 			}
 		});
 		this.sharedDataHttp = createHttpClient({
@@ -11202,6 +11216,7 @@ var FocusClient = class {
 				request.headers.set("Authorization", `Bearer ${token}`);
 				request.headers.set("Content-Type", "application/json");
 				request.headers.set("X-Toggl-PostHog-Data", JSON.stringify({ platform_origin: "web" }));
+				request.headers.set(TOGGL_CLIENT_HEADER, this.clientSurface);
 			}
 		});
 	}
@@ -12254,10 +12269,10 @@ function renderOAuthCallbackPage(kind, detail) {
     </div>`);
 }
 function generateOAuthPKCE() {
-	const verifier = crypto.randomBytes(64).toString("base64url");
+	const verifier = crypto$1.randomBytes(64).toString("base64url");
 	return {
 		verifier,
-		challenge: crypto.createHash("sha256").update(verifier, "ascii").digest("base64url")
+		challenge: crypto$1.createHash("sha256").update(verifier, "ascii").digest("base64url")
 	};
 }
 function waitForOAuthCallback(port = TOGGL_OAUTH_CALLBACK_PORT, timeoutMs = TOGGL_OAUTH_LOGIN_TIMEOUT_MS) {
@@ -12300,7 +12315,7 @@ function waitForOAuthCallback(port = TOGGL_OAUTH_CALLBACK_PORT, timeoutMs = TOGG
 		});
 	});
 }
-async function exchangeAuthorizationCode(accountsApiUrl, code, verifier, redirectUri = togglOAuthRedirectUri(), clientId = TOGGL_OAUTH_CLIENT_ID) {
+async function exchangeAuthorizationCode(accountsApiUrl, code, verifier, clientSurface, redirectUri = togglOAuthRedirectUri(), clientId = TOGGL_OAUTH_CLIENT_ID) {
 	const params = new URLSearchParams({
 		grant_type: "authorization_code",
 		code,
@@ -12308,7 +12323,10 @@ async function exchangeAuthorizationCode(accountsApiUrl, code, verifier, redirec
 		client_id: clientId,
 		redirect_uri: redirectUri
 	});
-	const response = await fetch(`${accountsApiUrl}/api/oauth/token?${params}`, { method: "POST" });
+	const response = await fetch(`${accountsApiUrl}/api/oauth/token?${params}`, {
+		method: "POST",
+		headers: togglClientHeaders(clientSurface)
+	});
 	if (!response.ok) {
 		const text = await response.text();
 		throw new Error(`Token exchange failed (${response.status}): ${text}`);
@@ -12408,18 +12426,20 @@ var WorkspaceSelectionRequiredError = class extends Error {
 		this.workspaces = workspaces;
 	}
 };
-async function fetchAccountsApiMe(accountsApiUrl, token) {
+async function fetchAccountsApiMe(accountsApiUrl, token, clientSurface) {
 	const response = await fetch(`${accountsApiUrl}/api/me`, { headers: {
 		Authorization: `Bearer ${token}`,
-		"Content-Type": "application/json"
+		"Content-Type": "application/json",
+		...togglClientHeaders(clientSurface)
 	} });
 	if (!response.ok) throw new Error(`Failed to fetch user info (${response.status})`);
 	return response.json();
 }
-async function fetchAccessibleWorkspaces(accountsApiUrl, token) {
+async function fetchAccessibleWorkspaces(accountsApiUrl, token, clientSurface) {
 	const response = await fetch(`${accountsApiUrl}/org/api/organizations/me`, { headers: {
 		Authorization: `Bearer ${token}`,
-		"Content-Type": "application/json"
+		"Content-Type": "application/json",
+		...togglClientHeaders(clientSurface)
 	} });
 	if (!response.ok) throw new Error(`Failed to fetch organizations (${response.status})`);
 	return (await response.json()).flatMap((org) => (org.workspaces ?? []).filter((ws) => (ws.toggl_products ?? []).includes("focus")).map((ws) => {
@@ -12470,11 +12490,11 @@ async function runCliAuthFlow(options = {}) {
 		log
 	});
 	log("Exchanging authorization code...");
-	const tokens = await exchangeAuthorizationCode(accountsApiUrl, code, verifier, redirectUri, clientId);
+	const tokens = await exchangeAuthorizationCode(accountsApiUrl, code, verifier, "cli", redirectUri, clientId);
 	log("Fetching account info...");
-	const user = await fetchAccountsApiMe(accountsApiUrl, tokens.access_token);
+	const user = await fetchAccountsApiMe(accountsApiUrl, tokens.access_token, "cli");
 	if (!user.user_account_id) throw new Error("Could not determine user ID from API response.");
-	const workspaces = await fetchAccessibleWorkspaces(accountsApiUrl, tokens.access_token);
+	const workspaces = await fetchAccessibleWorkspaces(accountsApiUrl, tokens.access_token, "cli");
 	const selectedWorkspace = await resolveAuthenticatedWorkspace(workspaces, {
 		explicitWorkspaceId: options.workspaceId,
 		selectWorkspace: options.selectWorkspace,
@@ -12520,13 +12540,16 @@ const PUBLIC_CLI_PACKAGE_SPEC = `${PUBLIC_CLI_PACKAGE_NAME}@latest`;
 function npxMcpAuthCommand() {
 	return `npx ${PUBLIC_MCP_PACKAGE_NAME} auth`;
 }
-async function refreshTokens(accountsApiUrl, refreshToken, clientId = TOGGL_OAUTH_CLIENT_ID) {
+async function refreshTokens(accountsApiUrl, refreshToken, clientSurface, clientId = TOGGL_OAUTH_CLIENT_ID) {
 	const params = new URLSearchParams({
 		grant_type: "refresh_token",
 		refresh_token: refreshToken,
 		client_id: clientId
 	});
-	const response = await fetch(`${accountsApiUrl}/api/oauth/token?${params}`, { method: "POST" });
+	const response = await fetch(`${accountsApiUrl}/api/oauth/token?${params}`, {
+		method: "POST",
+		headers: togglClientHeaders(clientSurface)
+	});
 	if (!response.ok) {
 		const text = await response.text();
 		throw new Error(`Token refresh failed (${response.status}): ${text}`);
@@ -12538,7 +12561,7 @@ async function getValidToken(scope = "cli", profile) {
 	if (!authConfig) throw new Error(scope === "cli" ? "Not authenticated. Run `toggl auth` to sign in." : `Not authenticated. Run \`${npxMcpAuthCommand()}\` to sign in.`);
 	const now = Date.now() / 1e3;
 	if (authConfig.expires_at > now + 60) return authConfig.access_token;
-	const tokens = await refreshTokens(authConfig.accounts_api_url, authConfig.refresh_token, authConfig.oauth_client_id ?? "000000");
+	const tokens = await refreshTokens(authConfig.accounts_api_url, authConfig.refresh_token, scope, authConfig.oauth_client_id ?? "000000");
 	authConfig.access_token = tokens.access_token;
 	authConfig.refresh_token = tokens.refresh_token;
 	authConfig.expires_at = now + tokens.expires_in;
@@ -12578,7 +12601,7 @@ async function refreshCliWorkspaces(profile) {
 	const token = await getValidToken("cli", profile);
 	const dev = loadDeveloperToolsConfig();
 	const auth = dev.profiles[profileKey];
-	auth.workspaces = await fetchAccessibleWorkspaces(auth.accounts_api_url, token);
+	auth.workspaces = await fetchAccessibleWorkspaces(auth.accounts_api_url, token, "cli");
 	dev.profiles[profileKey] = auth;
 	saveDeveloperToolsConfig(dev);
 	return listCachedCliWorkspaces(profile);
@@ -12595,6 +12618,204 @@ function switchCliWorkspace(workspaceId, profile) {
 	saveDeveloperToolsConfig(dev);
 	return target;
 }
+/**
+* Exception messages are the one channel `sendDefaultPii: false` does not cover,
+* and this repo's errors put user data in them: validation failures embed the
+* rejected input (valibot renders `issue.received`) and API failures embed the
+* response body. Sentry also captures uncaught exceptions and `cause` chains
+* through its own global handlers, which bypass any call-site scrubbing, so the
+* last word has to be `beforeSend`.
+*
+* Shared between the CLI and the public MCP build so the two cannot drift.
+*/
+/**
+* Fixed categories are `<surface>.<snake_case>` — anchored at both ends, because
+* a prefix test would pass anything that merely *starts* that way. A real message
+* like `cli.ts:12: unexpected token "secret"` begins with `cli.` and would
+* otherwise sail through unredacted.
+*/
+const SAFE_CATEGORY_PATTERN = /^(?:cli|mcp)\.[a-z][a-z0-9_]*$/;
+const REDACTED_SENTRY_MESSAGE = "redacted";
+function isSafeSentryMessage(value) {
+	return typeof value === "string" && SAFE_CATEGORY_PATTERN.test(value);
+}
+/**
+* Replace every exception message that is not a known category, and any top-level
+* message. Stack frames are left alone: they carry file, function and line, never
+* payloads.
+*/
+function redactUnsafeSentryMessages(event) {
+	if (event.message !== void 0 && !isSafeSentryMessage(event.message)) event.message = REDACTED_SENTRY_MESSAGE;
+	for (const value of event.exception?.values ?? []) if (!isSafeSentryMessage(value.value)) value.value = REDACTED_SENTRY_MESSAGE;
+	return event;
+}
+const DEFAULT_POSTHOG_HOST = "https://eu.i.posthog.com";
+/**
+* The shared Toggl **production** PostHog project — the same token the Track
+* webapp (`posthogApiKey.production`), the marketing site (`GATSBY_POSTHOG_ID`)
+* and the Focus mobile app (`EXPO_PUBLIC_POSTHOG_KEY`) send to. MCP/CLI events
+* therefore land beside product events for the same people, which is why the
+* `distinct_id` has to be the accounts nanoid and why `$lib` has to separate the
+* developer tools out again.
+*/
+const SHARED_TOGGL_PRODUCTION_POSTHOG_TOKEN = "phc_PiFIHfmVYQVICbsScOwEv7D9wBwoNvrUFZ1Fq9WxBrp";
+/**
+* PostHog splits usage and billing by `$lib`, so it has to name the sending
+* client rather than this module: sharing the Toggl production project with the
+* webapp, marketing site and mobile app means a single library value would leave
+* MCP and CLI volume indistinguishable in that breakdown.
+*/
+const POSTHOG_LIB_BY_CLIENT = {
+	mcp: "MCP",
+	cli: "CLI"
+};
+const TOOL_INVOCATION_EVENT = "toggl_tool_invocation";
+/** Bound collector I/O so analytics cannot hang a completed CLI/MCP exit path. */
+const CAPTURE_TIMEOUT_MS = 2e3;
+const FLUSH_TIMEOUT_MS = 2e3;
+/** Actions are catalog identifiers, so anything else is a caller bug, not data. */
+const ACTION_PATTERN = /^[a-z0-9][a-z0-9._-]{0,63}$/i;
+let enabled = false;
+let apiKey = null;
+let host = DEFAULT_POSTHOG_HOST;
+let sessionId = "";
+let distinctId = "";
+let client = "mcp";
+let packageVersion = "0.0.0";
+const pending = /* @__PURE__ */ new Set();
+function envFlagDisabled(raw) {
+	if (raw === void 0 || raw === "") return false;
+	const normalized = raw.trim().toLowerCase();
+	return normalized === "0" || normalized === "false" || normalized === "off" || normalized === "no";
+}
+/**
+* Initialize product analytics for a public MCP/CLI process.
+* No-ops when TOGGL_PRODUCT_ANALYTICS is 0/false/off, or when the API key is "off".
+*/
+function initProductAnalytics(context) {
+	if (envFlagDisabled(process.env.TOGGL_PRODUCT_ANALYTICS)) {
+		enabled = false;
+		return false;
+	}
+	const key = (process.env.TOGGL_POSTHOG_API_KEY ?? SHARED_TOGGL_PRODUCTION_POSTHOG_TOKEN).trim();
+	if (!key || key.toLowerCase() === "off") {
+		enabled = false;
+		return false;
+	}
+	apiKey = key;
+	host = (process.env.TOGGL_POSTHOG_HOST ?? DEFAULT_POSTHOG_HOST).replace(/\/$/, "");
+	sessionId = context.sessionId ?? crypto.randomUUID();
+	distinctId = context.distinctId ?? `anon:${sessionId}`;
+	client = context.client;
+	packageVersion = context.packageVersion;
+	enabled = true;
+	return true;
+}
+function normalizeAction(action) {
+	if (typeof action !== "string") return null;
+	const trimmed = action.trim();
+	return ACTION_PATTERN.test(trimmed) ? trimmed : null;
+}
+/** Strict allowlist — never accept args/results. */
+function captureToolInvocation(event) {
+	if (!enabled || !apiKey) return;
+	const task = sendCapture(TOOL_INVOCATION_EVENT, {
+		tool_name: event.toolName,
+		action: normalizeAction(event.action),
+		outcome: event.outcome,
+		success: event.outcome === "success",
+		client,
+		session_id: sessionId,
+		package_version: packageVersion
+	}, event.distinctId).finally(() => {
+		pending.delete(task);
+	});
+	pending.add(task);
+}
+async function sendCapture(event, properties, eventDistinctId) {
+	if (!apiKey) return;
+	const controller = new AbortController();
+	const timer = setTimeout(() => controller.abort(), CAPTURE_TIMEOUT_MS);
+	try {
+		const response = await fetch(`${host}/i/v0/e/`, {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({
+				api_key: apiKey,
+				event,
+				distinct_id: eventDistinctId ?? distinctId,
+				properties: {
+					...properties,
+					$lib: POSTHOG_LIB_BY_CLIENT[client]
+				}
+			}),
+			signal: controller.signal
+		});
+		if (!response.ok) await response.text().catch(() => void 0);
+	} catch {} finally {
+		clearTimeout(timer);
+	}
+}
+async function shutdownProductAnalytics() {
+	if (pending.size === 0) {
+		enabled = false;
+		return;
+	}
+	const inflight = [...pending];
+	let flushTimer;
+	try {
+		await Promise.race([Promise.allSettled(inflight), new Promise((resolve) => {
+			flushTimer = setTimeout(resolve, FLUSH_TIMEOUT_MS);
+		})]);
+	} finally {
+		if (flushTimer !== void 0) clearTimeout(flushTimer);
+		pending.clear();
+		enabled = false;
+	}
+}
+/**
+* Accounts mints the base62 nanoid as the JWT `sub`; it is the same value
+* accounts-be sends to PostHog as `distinct_id`, so it is short and URL-safe.
+*/
+const NANOID_PATTERN = /^[0-9A-Za-z_-]{6,64}$/;
+/**
+* Read `sub` out of a Toggl accounts access token without verifying it.
+*
+* Verification would need the accounts JWKS; the value is only used as an
+* analytics key, and a forged token would only mislabel the forger's own events.
+*/
+function decodeAccessTokenSubject(token) {
+	if (!token) return null;
+	const payloadSegment = token.split(".")[1];
+	if (!payloadSegment) return null;
+	try {
+		const sub = JSON.parse(Buffer.from(payloadSegment, "base64url").toString("utf8")).sub;
+		if (typeof sub !== "string" || !NANOID_PATTERN.test(sub)) return null;
+		return sub;
+	} catch {
+		return null;
+	}
+}
+/**
+* Stable PostHog identity for a signed-in MCP/CLI process.
+*
+* The nanoid comes from the persisted profile, so the same person keeps one
+* `distinct_id` across process restarts and across MCP and CLI — a per-process
+* UUID would make every invocation look like a new user and every funnel
+* one-step-deep.
+*
+* The profile's numeric `user_id` is `user_account_id`, which is deliberately
+* *not* used here: accounts-be, toggl_api and the Track webapp all identify a
+* person in PostHog by the nanoid, so a bigint key would orphan these events
+* from every other identity we already have for the same user.
+*/
+function resolveProductAnalyticsDistinctId(scope) {
+	try {
+		return decodeAccessTokenSubject(loadProfile(scope)?.access_token);
+	} catch {
+		return null;
+	}
+}
 //#endregion
 //#region src/cli-package-manifest.ts
 const pkgJsonPath = path$1.join(path$1.dirname(fileURLToPath(import.meta.url)), "..", "package.json");
@@ -24752,6 +24973,83 @@ async function runValidatedOperation(operation, options, deps) {
 	deps.output(response.data);
 }
 //#endregion
+//#region src/telemetry.ts
+function envEnabled(raw) {
+	if (raw === void 0) return false;
+	const normalized = raw.trim().toLowerCase();
+	return normalized === "1" || normalized === "true" || normalized === "on" || normalized === "yes";
+}
+let sentryEnabled = false;
+let productAnalyticsEnabled = false;
+function initCliTelemetry(packageVersion) {
+	productAnalyticsEnabled = initProductAnalytics({
+		client: "cli",
+		packageVersion,
+		distinctId: resolveProductAnalyticsDistinctId("cli")
+	});
+	if (!envEnabled(process.env.TOGGL_SENTRY)) {
+		sentryEnabled = false;
+		return;
+	}
+	const dsn = process.env.SENTRY_DSN;
+	if (!dsn || dsn === "off") {
+		console.error("[Telemetry] TOGGL_SENTRY is set but SENTRY_DSN is missing; Sentry left disabled");
+		sentryEnabled = false;
+		return;
+	}
+	Sentry.init({
+		dsn,
+		environment: process.env.NODE_ENV ?? "production",
+		tracesSampleRate: .1,
+		sendDefaultPii: false,
+		enableLogs: false,
+		beforeSend: (event) => redactUnsafeSentryMessages(event)
+	});
+	Sentry.setTag("cli.session.id", crypto.randomUUID());
+	sentryEnabled = true;
+}
+/**
+* `action` mirrors the MCP entity-tool action so one PostHog query can compare
+* `toggl reports list` with the `reports` tool's `list` action.
+*/
+function recordCliCommand(commandName, action, success) {
+	if (!productAnalyticsEnabled) return;
+	captureToolInvocation({
+		toolName: commandName,
+		action,
+		outcome: success ? "success" : "error"
+	});
+}
+function classifyCliSentryError(error) {
+	const message = error instanceof Error ? error.message : String(error);
+	if (message.startsWith("Invalid input:") || message.startsWith("Invalid input ")) return "cli.validation_error";
+	if (/^\d{3}:\s/.test(message)) return "cli.api_error";
+	return "cli.command_error";
+}
+function toSentrySafeCliError(error) {
+	const category = classifyCliSentryError(error);
+	const safe = new Error(category);
+	safe.name = error instanceof Error ? error.name : "Error";
+	if (error instanceof Error && typeof error.stack === "string") safe.stack = error.message ? error.stack.replaceAll(error.message, category) : error.stack;
+	return safe;
+}
+function captureCliException(error) {
+	if (!sentryEnabled) return;
+	const category = classifyCliSentryError(error);
+	Sentry.withScope((scope) => {
+		scope.setTag("cli.error_category", category);
+		Sentry.captureException(toSentrySafeCliError(error));
+	});
+}
+async function shutdownCliTelemetry() {
+	const tasks = [];
+	if (productAnalyticsEnabled) tasks.push(shutdownProductAnalytics());
+	if (sentryEnabled) tasks.push(Sentry.close(2e3));
+	if (tasks.length > 0) await Promise.allSettled(tasks);
+	sentryEnabled = false;
+	productAnalyticsEnabled = false;
+}
+//#endregion
 //#region src/output.ts
 function isRecord(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
@@ -25062,7 +25360,8 @@ function getClient(options) {
 		tokenProvider: () => getValidToken("cli", options.profile),
 		userId: config.user_id,
 		organizationId: String(config.organization_id),
-		workspaceId: options.workspaceId ?? String(config.workspace_id)
+		workspaceId: options.workspaceId ?? String(config.workspace_id),
+		clientSurface: "cli"
 	});
 }
 async function runOperation(operation, globalOptions, options, rawInput) {
@@ -25099,6 +25398,19 @@ function groupCommand(program, group) {
 	for (const part of group) command = command.commands.find((candidate) => candidate.name() === part) ?? command.command(part).description(`${part} operations`);
 	return command;
 }
+function cliCommandPath(command) {
+	const parts = [];
+	let current = command;
+	while (current?.parent) {
+		parts.unshift(current.name());
+		current = current.parent;
+	}
+	return parts.filter(Boolean).join(" ") || command.name();
+}
+function recordActionAnalytics(actionCommand) {
+	const failed = typeof process.exitCode === "number" && process.exitCode !== 0;
+	recordCliCommand(cliCommandPath(actionCommand), actionCommand.name() || null, !failed);
+}
 function createProgram(programOptions = {}) {
 	const promptAdapter = programOptions.promptAdapter ?? inquirerPromptAdapter;
 	const isTty = programOptions.isTty ?? (() => Boolean(process.stdin.isTTY && process.stdout.isTTY));
@@ -25150,6 +25462,7 @@ function createProgram(programOptions = {}) {
 			const globalOptions = program.opts();
 			output(opts.refresh ? await refreshCliWorkspaces(globalOptions.profile) : listCachedCliWorkspaces(globalOptions.profile), globalOptions);
 		} catch (error) {
+			captureCliException(error);
 			process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
 			process.exitCode = 1;
 		}
@@ -25169,6 +25482,7 @@ function createProgram(programOptions = {}) {
 				organization_name: target.organization_name
 			}, globalOptions);
 		} catch (error) {
+			captureCliException(error);
 			process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
 			process.exitCode = 1;
 		}
@@ -25178,6 +25492,7 @@ function createProgram(programOptions = {}) {
 		try {
 			output(listCliProfiles(), program.opts());
 		} catch (error) {
+			captureCliException(error);
 			process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
 			process.exitCode = 1;
 		}
@@ -25186,6 +25501,7 @@ function createProgram(programOptions = {}) {
 		try {
 			output(getCurrentCliProfile(), program.opts());
 		} catch (error) {
+			captureCliException(error);
 			process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
 			process.exitCode = 1;
 		}
@@ -25199,6 +25515,7 @@ function createProgram(programOptions = {}) {
 				exampleWhenNotInteractive: "Example: toggl profile switch production-12345"
 			})), globalOptions);
 		} catch (error) {
+			captureCliException(error);
 			process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
 			process.exitCode = 1;
 		}
@@ -25212,6 +25529,7 @@ function createProgram(programOptions = {}) {
 				exampleWhenNotInteractive: "Example: toggl profile remove production-12345"
 			})), globalOptions);
 		} catch (error) {
+			captureCliException(error);
 			process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
 			process.exitCode = 1;
 		}
@@ -25224,6 +25542,7 @@ function createProgram(programOptions = {}) {
 				json: globalOptions.json
 			});
 		} catch (error) {
+			captureCliException(error);
 			process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
 			process.exitCode = 1;
 		}
@@ -25236,6 +25555,7 @@ function createProgram(programOptions = {}) {
 			try {
 				await runSkillSetup(opts);
 			} catch (error) {
+				captureCliException(error);
 				process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
 				process.exitCode = 1;
 			}
@@ -25275,6 +25595,7 @@ Common commands:
 				const entityContext = willPrompt && !cmdOptions.dryRun ? { client: getClient(globalOptions) } : void 0;
 				await runOperation(operation, globalOptions, cmdOptions, willPrompt ? await promptForOperationInput(operation, rawInput, promptAdapter, entityContext) : rawInput);
 			} catch (error) {
+				captureCliException(error);
 				process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
 				process.exitCode = 1;
 			}
@@ -25286,6 +25607,9 @@ Common commands:
 			command.addHelpText("after", `\nExamples:\n${exampleLines}`);
 		}
 	}
+	program.hook("postAction", (_thisCommand, actionCommand) => {
+		recordActionAnalytics(actionCommand);
+	});
 	if (programOptions.enableUpdateNotification) program.hook("postAction", (_thisCommand, actionCommand) => {
 		maybeNotifyUpdateAvailable({
 			exitCode: typeof process.exitCode === "number" ? process.exitCode : 0,
@@ -25298,6 +25622,6 @@ Common commands:
 	return program;
 }
 //#endregion
-export { CommanderError as n, createProgram as t };
+export { CommanderError as a, shutdownCliTelemetry as i, captureCliException as n, initCliTelemetry as r, createProgram as t };
 
-//# sourceMappingURL=program-BJrl7qqO.js.map
+//# sourceMappingURL=program-B6EuV2vO.js.map

package/build/program.js

@@ -1,2 +1,2 @@
-import { t as createProgram } from "./program-BJrl7qqO.js";
+import { t as createProgram } from "./program-B6EuV2vO.js";
 export { createProgram };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@togglhq/cli",
-  "version": "1.7.1",
+  "version": "1.8.0",
   "description": "Toggl CLI for Toggl 2.0 API operations.",
   "license": "UNLICENSED",
   "type": "module",
@@ -50,12 +50,13 @@
     "node": ">=20"
   },
   "dependencies": {
+    "@sentry/node": "10.47.0",
     "skills": "1.5.2"
   },
   "devDependencies": {
     "@toggl/cli-core": "workspace:^",
     "@toggl/operations": "workspace:^",
-    "@toggl/queries": "2.1.212",
+    "@toggl/queries": "2.1.216",
     "@types/node": "22.19.11",
     "tsdown": "0.21.8",
     "typescript": "5.9.3",