[emmanuelgautier]

Summary

• Reports anonymous CLI usage analytics (command, flag names, exit code, latency) to proxyaudit's own Argvio tenant through telemetryx.Instrument, and embeds its public_ingest ingest key. It only allows sending usage data, so it is safe to ship in the binary.
• Removes the OpenTelemetry pipeline (telemetryx.New and the OTel reporter on scan). Argvio's command invocations and exit codes replace the per-command success and error counts.
• Failures are classified (timeout, canceled, network, user, unknown) by x's default classifier. There were no OTel counters to carry over.
• Records a mistyped command as an unknown-command attempt (nearest command as suggestion, never the typed text) through telemetryx.Execute. Shell, terminal and runtime on session start are sent by argvio itself at the Basic tier.
• Uses telemetryx.Exit / telemetryx.Fatal instead of os.Exit / log.Fatal inside commands, so failed runs are recorded and flushed.
• Opt out with --sqa-opt-out, DO_NOT_TRACK or ARGVIO_DISABLED. Interactive runs report at the Basic tier, CI runs at Anonymous. Counters are accepted at the anonymous tier, so they are also sent from CI; they only ever carry fixed identifiers written in code.

Dependency

Uses github.com/cerberauth/x at fc43052 on main (it includes #61 and #66, both merged) and argvio-go v0.4.0, both released. Nothing else needs to merge first.

Test plan

• go build ./..., go vet ./..., go test ./..., golangci-lint run --new-from-rev=origin/main (0 issues)
• Ran the built binary against the live endpoint, including failing commands; exit codes and output are unchanged.
• Error reasons and counters are accepted by Argvio v0.5.0, but the dashboard panels for them (getargvio/ui#26, #27) don't exist yet, so they can't be checked there for now.

Update: Argvio v0.7.0 product metrics

Merge order: cerberauth/x#69 (argvio-go v0.5.0 + dimensioned metrics) first. This branch points at that PR's head (x@2cfb133eb4f2) and will be re-pointed at the merged x. Then cerberauth/ci#42 (catalog workflow) and cerberauth/infrastructure#5 (Argvio v0.7.0 server + UI; it creates this CLI's metrics_admin key).

• argvio-go v0.5.0 through x: command panics are now recorded (category internal, reason panic, exit 2, never the panic value), so --sqa-opt-out's "crash reports" is true.
• Metrics use named dimensions (telemetryx.NewCounter/NewDuration/NewValue) instead of one packed label.
• argvio.metrics.yaml: the catalog the Argvio Product view renders from (titles, units, dimension order, ratios). Validated offline with argvio metric validate v0.7.0. .github/workflows/argvio-metrics.yml validates it on PRs and syncs it on release / manual dispatch with the ARGVIO_METRICS_ADMIN_KEY secret (sync is skipped with a warning while the secret isn't set).
• New: scan outcome via scanmetrics (scan.checks, scan.vulnerable over the 35 checks, scan.findings), scan.engine (the --engine hint, flag values not being in usage events), rate ratios.
• README: new Telemetry section.

🤖 Generated with Claude Code