great-cto 2.5.8 → 2.5.9

package/dist/telemetry.js

@@ -1,42 +1,27 @@
 // Anonymous opt-in telemetry.
 //
-// What we send: random install_id (UUID, used as PostHog distinct_id), version,
-// archetype, node version, platform, and timestamp. Nothing personal — no email,
-// paths, code, or repo names. The install_id is generated once and stored in
-// ~/.great_cto/config.json.
+// What we send: random install_id (UUID), version, archetype, node version,
+// platform, and timestamp. Nothing personal — no email, paths, code, or repo
+// names. The install_id is generated once and stored in ~/.great_cto/config.json.
 //
 // What we DON'T send: project paths, code, file names, environment variables,
-// shell history, CLI flag values, exact IP (PostHog discards by default; only
-// country-level geo is retained at ingestion).
+// shell history, IP-derived geolocation (CF only logs country at the edge).
 //
 // Opt-out:
 //   - GREATCTO_NO_TELEMETRY=1 env var (highest priority)
-//   - DO_NOT_TRACK=1 env var (consoledonottrack.com standard)
 //   - --no-telemetry CLI flag
 //   - User declines the first-run prompt
 //   - Manually edit ~/.great_cto/config.json: { "telemetry": false }
 //
-// Backend: PostHog Cloud EU (https://eu.i.posthog.com)
-//   Project ID:   175527
-//   Endpoint:     POST /i/v0/e/   (single-event capture)
-//   API key:      phc_* — public, write-only ingestion token; safe in OSS code.
-//
-// We never run telemetry from an `npm postinstall` hook. The install ping fires
-// from the first interactive `great-cto init` run instead, so a failed network
-// call can never break `npm install` / `npm ci`.
+// Endpoint: https://greatcto.systems/api/install (Cloudflare Worker → D1)
+// Source:   workers/telemetry/index.js
 import * as fs from "node:fs";
 import * as path from "node:path";
 import * as os from "node:os";
 import * as crypto from "node:crypto";
 import { dim, log } from "./ui.js";
-// Public, write-only PostHog ingestion key. Safe to ship in open-source code:
-// phc_* keys can only POST events, not read them.
-const POSTHOG_API_KEY = "phc_xk55Ce6CMp9ZgjZHVjdGoshxZJk7kSF4WGXKLRUHatGv";
-const POSTHOG_ENDPOINT = "https://eu.i.posthog.com/i/v0/e/";
+const TELEMETRY_ENDPOINT = "https://greatcto.systems/api/install";
 const TELEMETRY_TIMEOUT_MS = 1500;
-function telemetryDisabledByEnv() {
-    return process.env.GREATCTO_NO_TELEMETRY === "1" || process.env.DO_NOT_TRACK === "1";
-}
 function configPath() {
     return path.join(os.homedir(), ".great_cto", "config.json");
 }
@@ -73,7 +58,7 @@ function ensureInstallId(cfg) {
  *  4. Default to enabled (true) if non-interactive (e.g. CI), else show notice
  */
 export function resolveTelemetryConsent(cliFlag) {
-    if (telemetryDisabledByEnv())
+    if (process.env.GREATCTO_NO_TELEMETRY === "1")
         return false;
     if (cliFlag)
         return false;
@@ -84,12 +69,11 @@ export function resolveTelemetryConsent(cliFlag) {
     // show a clear notice with how to disable. Kept short; full details in README.
     log("");
     log(dim("─ Anonymous telemetry ────────────────────────────────"));
-    log(dim("  great_cto sends one anonymous ping per install + one"));
-    log(dim("  per subcommand to PostHog Cloud EU (eu.posthog.com)."));
-    log(dim("  Sent: install_id, version, archetype, Node, OS, exit code."));
+    log(dim("  great_cto sends one anonymous ping per install:"));
+    log(dim("  install_id, version, archetype, Node version, OS."));
     log(dim("  No paths, no code, no PII. Disable any time:"));
-    log(dim("    great-cto --no-telemetry  ·  GREATCTO_NO_TELEMETRY=1"));
-    log(dim("    DO_NOT_TRACK=1            ·  ~/.great_cto/config.json"));
+    log(dim("    great-cto --no-telemetry  · or set GREATCTO_NO_TELEMETRY=1"));
+    log(dim("    or edit ~/.great_cto/config.json: { \"telemetry\": false }"));
     log(dim("──────────────────────────────────────────────────────"));
     log("");
     cfg.telemetry = true;
@@ -99,70 +83,38 @@ export function resolveTelemetryConsent(cliFlag) {
     return true;
 }
 /**
- * POST a single event to PostHog `/i/v0/e/`. Fire-and-forget — never throws,
- * never blocks longer than TELEMETRY_TIMEOUT_MS.
- *
- * `distinct_id` is the random install_id (no PII).
+ * Best-effort telemetry ping. Non-blocking, fire-and-forget. Never throws.
+ * Returns a promise that resolves once the request completes or times out.
  */
-async function postHogCapture(opts) {
-    const body = {
-        api_key: POSTHOG_API_KEY,
-        event: opts.event,
-        distinct_id: opts.distinct_id,
-        properties: {
-            ...opts.properties,
-            // Standard PostHog meta (these all start with $) — safe, no PII.
-            $lib: "great-cto-cli",
-            $lib_version: opts.cliVersion,
-            // Disable PostHog GeoIP enrichment beyond country (we don't want city-level).
-            // PostHog respects this server-side.
-            $ip: null,
-        },
-        timestamp: new Date().toISOString(),
+export async function sendInstallPing(opts) {
+    if (!opts.consent)
+        return;
+    const cfg = readConfig();
+    const install_id = ensureInstallId(cfg);
+    const evt = {
+        install_id,
+        cli_version: opts.cliVersion,
+        archetype: opts.archetype,
+        node_version: process.version,
+        platform: process.platform,
+        arch: process.arch,
+        ts: new Date().toISOString(),
     };
     try {
         const ctrl = new AbortController();
         const timer = setTimeout(() => ctrl.abort(), TELEMETRY_TIMEOUT_MS);
-        await fetch(POSTHOG_ENDPOINT, {
+        await fetch(TELEMETRY_ENDPOINT, {
             method: "POST",
-            headers: {
-                "Content-Type": "application/json",
-                "User-Agent": `great-cto-cli/${opts.cliVersion}`,
-            },
-            body: JSON.stringify(body),
+            headers: { "Content-Type": "application/json", "User-Agent": `great-cto-cli/${opts.cliVersion}` },
+            body: JSON.stringify(evt),
             signal: ctrl.signal,
         }).catch(() => { });
         clearTimeout(timer);
     }
     catch {
-        // best-effort
+        // never block install on telemetry failure
     }
 }
-/**
- * Install / first-run ping. Fired once per `great-cto init` invocation.
- * Non-blocking, fire-and-forget. Never throws.
- */
-export async function sendInstallPing(opts) {
-    if (!opts.consent)
-        return;
-    if (telemetryDisabledByEnv())
-        return;
-    const cfg = readConfig();
-    const install_id = ensureInstallId(cfg);
-    await postHogCapture({
-        event: "cli_install",
-        distinct_id: install_id,
-        cliVersion: opts.cliVersion,
-        properties: {
-            cli_version: opts.cliVersion,
-            archetype: opts.archetype,
-            node_version: process.version,
-            platform: process.platform,
-            arch: process.arch,
-            ci: Boolean(process.env.CI),
-        },
-    });
-}
 /**
  * Subcommand-usage ping. Fire-and-forget. Used to track which v2.4+ commands
  * (ci / mcp / adapt / serve / report / webhook) actually get used in the wild.
@@ -177,25 +129,31 @@ export async function sendInstallPing(opts) {
  * Honours the same opt-out signals as install ping.
  */
 export async function sendUsagePing(opts) {
-    if (telemetryDisabledByEnv())
+    if (process.env.GREATCTO_NO_TELEMETRY === "1")
         return;
     const cfg = readConfig();
     if (cfg.telemetry === false)
         return;
     if (!cfg.install_id)
         return; // never ping without an established install_id
-    await postHogCapture({
-        event: "cli_usage",
-        distinct_id: cfg.install_id,
-        cliVersion: opts.cliVersion,
-        properties: {
-            cli_version: opts.cliVersion,
-            subcommand: opts.subcommand,
-            exit_code: opts.exitCode,
-            node_version: process.version,
-            platform: process.platform,
-            arch: process.arch,
-            ci: Boolean(process.env.CI),
-        },
-    });
+    try {
+        const ctrl = new AbortController();
+        const timer = setTimeout(() => ctrl.abort(), TELEMETRY_TIMEOUT_MS);
+        await fetch(`${TELEMETRY_ENDPOINT.replace("/install", "/usage")}`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json", "User-Agent": `great-cto-cli/${opts.cliVersion}` },
+            body: JSON.stringify({
+                install_id: cfg.install_id,
+                cli_version: opts.cliVersion,
+                subcommand: opts.subcommand,
+                exit_code: opts.exitCode,
+                ts: new Date().toISOString(),
+            }),
+            signal: ctrl.signal,
+        }).catch(() => { });
+        clearTimeout(timer);
+    }
+    catch {
+        // best-effort
+    }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "great-cto",
-  "version": "2.5.8",
+  "version": "2.5.9",
   "description": "One command install for the great_cto Claude Code plugin. Auto-detects your stack, picks the right archetype, bootstraps PROJECT.md.",
   "keywords": [
     "claude-code",