feat(telemetry): CLI usage telemetry

[djgould]

Adds usage telemetry to the CLI (GROW-1200): one CLI_COMMAND_EXECUTED event per command run, sent to clerk-telemetry.com (BigQuery, sdk = 'clerk-cli').

What an event contains

Field	Example
command	users list — subcommand names only, never arguments
flags	json,limit — flag names only, never values
outcome / exit_code / error_code	error / 1 / not_linked
duration_ms	412
machine_uuid	random per-machine UUID
install_method	npm_global, homebrew, npx, …
ai_agent	claude_code, cursor, gemini_cli, … — empty for humans
terminal_program	ghostty, warp, …
mode	human / agent (TTY detection)
os / arch / ci / in_tmux / in_screen	darwin / arm64 / false / …
env	active environment profile
workspace_id / app_id	linked project ids; null when unlinked

Never collected: command arguments, option values, file paths, error messages, or personal data.

Controls

• clerk telemetry status|disable|enable — persisted opt-out; a disable run sends nothing itself
• CLERK_TELEMETRY_DISABLED / DO_NOT_TRACK env vars (any non-false value)
• The first run only shows a disclosure notice and sends nothing
• --verbose prints each event before the POST; failures never affect the command (1s cap)
• The User-Agent also gains AIAgent/<agent> so API logs can classify agent traffic

Release gate: telemetry-service drops iid-less events (workers/telemetry-service/src/index.ts:91) — needs the one-line sdk === "clerk-cli" exemption in cloudflare-workers before this ships, then an end-to-end BigQuery check.

🤖 Generated with Claude Code

[changeset-bot]

🦋 Changeset detected

Latest commit: d07771f

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
clerk	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR