refactor: replace all println/eprintln with tracing

Cargo.toml

@@ -37,6 +37,8 @@ derive_more = { version = "1", default-features = false, features = ["full"] }
 smart-default = "0.7"
 tokio       = { version = "1", features = ["full"] }
 tokio-util  = { version = "0.7", features = ["rt"] }
+tracing     = "0.1"
+tracing-subscriber = { version = "0.3", features = ["env-filter", "fmt", "registry"] }
 
 [workspace.lints.rust]
 unsafe_code = "deny"
@@ -65,8 +67,8 @@ unimplemented = "deny"
 mem_forget = "deny"
 implicit_clone = "deny"
 lossy_float_literal = "deny"
-print_stdout = "warn"
-print_stderr = "warn"
+print_stdout = "deny"
+print_stderr = "deny"
 unwrap_used = "warn"
 expect_used = "warn"
 panic = "warn"

crates/hm-plugin-cloud/Cargo.toml

@@ -26,7 +26,7 @@ reqwest            = { version = "0.13", default-features = false, features = ["
 tokio              = { version = "1", features = ["net", "time", "sync"] }
 webbrowser         = "1"
 dialoguer          = "0.11"
-tracing            = "0.1"
+tracing            = { workspace = true }
 
 [lints]
 workspace = true

crates/hm-plugin-cloud/src/auth/login.rs

@@ -41,7 +41,7 @@ async fn login_loopback(
 
     tracing::info!("opening browser to {auth_url}");
     if webbrowser::open(&auth_url).is_err() {
-        eprintln!("couldn't auto-open the browser. Open this URL manually:\n  {auth_url}");
+        tracing::warn!("couldn't auto-open the browser. Open this URL manually:\n  {auth_url}");
     }
 
     // Wait for a single connection with a 180-second timeout.
@@ -98,7 +98,7 @@ async fn login_paste(
         "{}/cli/login?challenge={}&redirect_uri=urn:ietf:wg:oauth:2.0:oob",
         cfg.api_base, challenge,
     );
-    eprintln!("Open this URL in your browser, then paste the code:\n  {auth_url}");
+    tracing::info!("Open this URL in your browser, then paste the code:\n  {auth_url}");
     let _ = webbrowser::open(&auth_url);
 
     // Tests inject the code via `HARMONT_LOGIN_CODE` to avoid TTY.
@@ -132,7 +132,7 @@ async fn finalize(cfg: &Config, code: &str, verifier: &str) -> Result<()> {
 
     let auth_client = Client::new(cfg, Some(resp.token));
     let me: User = auth_client.get("/auth/me").await?;
-    eprintln!(
+    tracing::info!(
         "logged in as {} ({})",
         me.display_name.clone().unwrap_or_else(|| me.email.clone()),
         me.email,

crates/hm-plugin-cloud/src/auth/logout.rs

@@ -10,6 +10,6 @@ use crate::creds;
 pub(crate) async fn run(env: &BTreeMap<String, String>) -> Result<()> {
     let cfg = Config::from_env(env);
     creds::clear_token(&cfg.api_base);
-    eprintln!("logged out of {}", cfg.api_base);
+    tracing::info!("logged out of {}", cfg.api_base);
     Ok(())
 }

crates/hm-plugin-cloud/src/auth/whoami.rs

@@ -16,7 +16,7 @@ pub(crate) async fn run(env: &BTreeMap<String, String>) -> Result<()> {
     })?;
     let client = Client::new(&cfg, Some(token));
     let me: User = client.get("/auth/me").await?;
-    println!(
+    tracing::info!(
         "{} <{}> (id {})",
         me.display_name.clone().unwrap_or_else(|| me.email.clone()),
         me.email,

crates/hm-plugin-cloud/src/cli.rs

@@ -158,11 +158,19 @@ pub async fn dispatch(argv: Vec<String>, env: BTreeMap<String, String>) -> Resul
             let msg = e.to_string();
             return match e.kind() {
                 ErrorKind::DisplayHelp | ErrorKind::DisplayVersion => {
-                    print!("{msg}");
+                    #[allow(clippy::print_stdout)]
+                    {
+                        use std::io::Write;
+                        std::io::stdout().write_all(msg.as_bytes()).ok();
+                    }
                     Ok(0)
                 }
                 _ => {
-                    eprint!("{msg}");
+                    #[allow(clippy::print_stderr)]
+                    {
+                        use std::io::Write;
+                        std::io::stderr().write_all(msg.as_bytes()).ok();
+                    }
                     Ok(2)
                 }
             };
@@ -187,7 +195,7 @@ pub async fn dispatch_command(command: CloudCommand, env: BTreeMap<String, Strin
     match result {
         Ok(()) => Ok(0),
         Err(e) => {
-            eprintln!("{e:#}");
+            tracing::error!("{e:#}");
             Ok(1)
         }
     }

crates/hm-plugin-cloud/src/lib.rs

@@ -9,8 +9,6 @@
     clippy::multiple_crate_versions,
     clippy::cargo_common_metadata,
     clippy::missing_errors_doc,
-    clippy::print_stdout,
-    clippy::print_stderr,
     reason = "quick migration from plugin crate; polish later"
 )]
 

crates/hm-plugin-cloud/src/verbs/billing.rs

@@ -40,7 +40,7 @@ async fn balance(client: &Client, org: &str) -> Result<()> {
         .get(&format!("/organizations/{org}/billing/balance"))
         .await?;
     let dollars = b.credits_usd_cents as f64 / 100.0;
-    println!("${dollars:.2}");
+    tracing::info!("${dollars:.2}");
     Ok(())
 }
 
@@ -51,7 +51,7 @@ async fn transactions(client: &Client, org: &str, limit: u32) -> Result<()> {
         ))
         .await?;
     for t in &list.data {
-        println!(
+        tracing::info!(
             "{}  {:>10} {:<14} {}",
             t.at.format("%Y-%m-%d %H:%M:%S"),
             t.amount_cents,
@@ -78,7 +78,7 @@ async fn usage(client: &Client, org: &str, from: Option<&str>, to: Option<&str>)
     let u: UsageWindow = client
         .get(&format!("/organizations/{org}/billing/usage{qs}"))
         .await?;
-    println!(
+    tracing::info!(
         "{} -> {}: {:.2} min, ${:.2}",
         u.from.format("%Y-%m-%d"),
         u.to.format("%Y-%m-%d"),
@@ -99,10 +99,10 @@ async fn topup(client: &Client, org: &str, amount_usd: u32, no_browser: bool) ->
         )
         .await?;
     if no_browser {
-        println!("{}", r.checkout_url);
+        tracing::info!("{}", r.checkout_url);
     } else if webbrowser::open(&r.checkout_url).is_err() {
-        eprintln!("couldn't open browser; URL:");
-        eprintln!("{}", r.checkout_url);
+        tracing::warn!("couldn't open browser; URL:");
+        tracing::warn!("{}", r.checkout_url);
     }
     Ok(())
 }
@@ -118,7 +118,7 @@ async fn redeem(client: &Client, org: &str, code: &str) -> Result<()> {
         )
         .await?;
     let dollars = r.credited_cents as f64 / 100.0;
-    eprintln!("credited ${dollars:.2}");
+    tracing::info!("credited ${dollars:.2}");
     Ok(())
 }
 

crates/hm-plugin-cloud/src/verbs/build.rs

@@ -31,7 +31,7 @@ async fn list(client: &Client, org: &str, pipe: &str) -> Result<()> {
         .get(&format!("/organizations/{org}/pipelines/{pipe}/builds"))
         .await?;
     for b in &builds.data {
-        println!(
+        tracing::info!(
             "#{:<5} {:<10} {}",
             b.number,
             b.state,
@@ -48,7 +48,7 @@ async fn show(client: &Client, org: &str, pipe: &str, number: i64) -> Result<()>
         ))
         .await?;
     let json = serde_json::to_string_pretty(&b).unwrap_or_default();
-    println!("{json}");
+    tracing::info!("{json}");
     Ok(())
 }
 
@@ -59,7 +59,7 @@ async fn cancel(client: &Client, org: &str, pipe: &str, number: i64) -> Result<(
             &serde_json::json!({}),
         )
         .await?;
-    eprintln!("build #{number} cancelled");
+    tracing::info!("build #{number} cancelled");
     Ok(())
 }
 
@@ -72,7 +72,7 @@ async fn watch(client: &Client, org: &str, pipe: &str, number: i64) -> Result<()
             ))
             .await?;
         if b.state != last_state {
-            eprintln!("state: {last_state} -> {}", b.state);
+            tracing::info!("state: {last_state} -> {}", b.state);
             last_state = b.state.clone();
         }
         match b.state.as_str() {

crates/hm-plugin-cloud/src/verbs/job.rs

@@ -40,7 +40,7 @@ async fn list(client: &Client, org: &str, pipe: &str, build: i64) -> Result<()>
         ))
         .await?;
     for j in &jobs.data {
-        println!(
+        tracing::info!(
             "{}  {:<10}  {}",
             j.id,
             j.state,
@@ -56,7 +56,7 @@ async fn show(client: &Client, org: &str, pipe: &str, build: i64, jid: &str) ->
             "/organizations/{org}/pipelines/{pipe}/builds/{build}/jobs/{jid}"
         ))
         .await?;
-    println!("{}", serde_json::to_string_pretty(&j).unwrap_or_default());
+    tracing::info!("{}", serde_json::to_string_pretty(&j).unwrap_or_default());
     Ok(())
 }
 
@@ -67,7 +67,7 @@ async fn log_cmd(client: &Client, org: &str, pipe: &str, build: i64, jid: &str)
         ))
         .await?;
     for chunk in &log.data {
-        println!("{}", chunk.line);
+        tracing::info!("{}", chunk.line);
     }
     Ok(())
 }

crates/hm-plugin-cloud/src/verbs/org.rs

@@ -32,6 +32,6 @@ async fn switch(client: &Client, slug: &str) -> Result<()> {
     let mut state = CloudState::load();
     state.active_org = Some(found.slug.clone());
     state.save();
-    eprintln!("active organization: {} ({})", found.name, found.slug);
+    tracing::info!("active organization: {} ({})", found.name, found.slug);
     Ok(())
 }

crates/hm-plugin-cloud/src/verbs/pipeline.rs

@@ -29,7 +29,7 @@ async fn list(client: &Client, org: &str) -> Result<()> {
         .get(&format!("/organizations/{org}/pipelines"))
         .await?;
     for p in &pipes.data {
-        println!(
+        tracing::info!(
             "{:<24} {}",
             p.slug,
             p.label.as_deref().unwrap_or("(no label)")
@@ -49,7 +49,7 @@ async fn show(client: &Client, org: &str, slug: &str) -> Result<()> {
         "default_branch": p.default_branch,
     }))
     .unwrap_or_default();
-    println!("{json}");
+    tracing::info!("{json}");
     Ok(())
 }
 

crates/hm-plugin-cloud/src/verbs/run.rs

@@ -75,7 +75,7 @@ pub(crate) async fn run(env: &BTreeMap<String, String>, args: RunArgs) -> Result
         args.pipeline,
         build.number
     );
-    eprintln!("submitted build #{}: {url}", build.number);
+    tracing::info!("submitted build #{}: {url}", build.number);
     if args.no_watch {
         return Ok(());
     }

crates/hm/Cargo.toml

@@ -43,8 +43,8 @@ tempfile = "3"
 anyhow = "1"
 thiserror = "2"
 backon = "1"
-tracing = "0.1"
-tracing-subscriber = { version = "0.3", features = ["env-filter", "fmt"] }
+tracing = { workspace = true }
+tracing-subscriber = { workspace = true }
 chrono = { version = "0.4", features = ["serde"] }
 url = "2"
 base64 = "0.22"

crates/hm/src/cli/plugin.rs

@@ -20,7 +20,7 @@ pub async fn run(cmd: PluginCommand) -> Result<()> {
 
 #[allow(clippy::unused_async)]
 async fn list() -> Result<()> {
-    println!("Registered runners:");
-    println!("  docker (default, built-in)");
+    tracing::info!("Registered runners:");
+    tracing::info!("  docker (default, built-in)");
     Ok(())
 }

crates/hm/src/cli/version.rs

@@ -7,6 +7,6 @@ use anyhow::Result;
 ///
 /// Returns an error on I/O failure.
 pub async fn run() -> Result<()> {
-    println!("hm {}", env!("CARGO_PKG_VERSION"));
+    tracing::info!("hm {}", env!("CARGO_PKG_VERSION"));
     Ok(())
 }

crates/hm/src/commands/dev/down.rs

@@ -16,10 +16,6 @@ use super::naming::{
 /// # Errors
 ///
 /// Returns Docker errors on list / stop / remove failures.
-#[allow(
-    clippy::print_stderr,
-    reason = "status messages to stderr are intentional for a foreground CLI"
-)]
 pub async fn handle(args: DevDownArgs, _ctx: RunContext) -> Result<i32> {
     let docker = DockerClient::connect()?;
     let worktree_root = resolve_worktree_root()?;
@@ -60,15 +56,15 @@ pub async fn handle(args: DevDownArgs, _ctx: RunContext) -> Result<i32> {
     }
 
     if to_remove.is_empty() {
-        eprintln!("[hm] nothing to sweep");
+        tracing::info!("[hm] nothing to sweep");
         return Ok(0);
     }
 
     let mut sessions_swept = BTreeSet::<String>::default();
     for (id, slug, session, name) in &to_remove {
         let _ = docker.stop_container(id).await;
         let _ = docker.remove_container(id).await;
-        eprintln!("[hm] removed {name} (slug={slug}, session={session})");
+        tracing::info!("[hm] removed {name} (slug={slug}, session={session})");
         sessions_swept.insert(session.clone());
     }
 

crates/hm/src/commands/dev/exec.rs

@@ -16,10 +16,6 @@ use super::naming::{
 ///
 /// Returns an error if Docker is unreachable or if the exec lifecycle
 /// calls fail.
-#[allow(
-    clippy::print_stderr,
-    reason = "user-facing error messages for a foreground CLI"
-)]
 pub async fn handle(args: DevExecArgs, _ctx: RunContext) -> Result<i32> {
     let docker = DockerClient::connect()?;
     let worktree_root = resolve_worktree_root()?;
@@ -44,14 +40,15 @@ pub async fn handle(args: DevExecArgs, _ctx: RunContext) -> Result<i32> {
         }
     }
     if matches.is_empty() {
-        eprintln!(
+        tracing::error!(
             "hm: slug `{}` is not running in this worktree.\n  → run `hm dev up {}` first.",
-            args.slug, args.slug,
+            args.slug,
+            args.slug,
         );
         return Ok(4);
     }
     if matches.len() > 1 {
-        eprintln!(
+        tracing::error!(
             "hm: slug `{}` matches multiple live sessions; pass --session <id>",
             args.slug
         );

crates/hm/src/commands/dev/logs.rs

@@ -19,10 +19,6 @@ use super::naming::{
 /// # Errors
 ///
 /// Returns an error if Docker is unreachable.
-#[allow(
-    clippy::print_stderr,
-    reason = "user-facing error messages for a foreground CLI"
-)]
 pub async fn handle(args: DevLogsArgs, _ctx: RunContext) -> Result<i32> {
     let docker = DockerClient::connect()?;
     let worktree_root = resolve_worktree_root()?;
@@ -47,14 +43,15 @@ pub async fn handle(args: DevLogsArgs, _ctx: RunContext) -> Result<i32> {
         }
     }
     if matches.is_empty() {
-        eprintln!(
+        tracing::error!(
             "hm: slug `{}` is not running in this worktree.\n  → run `hm dev up {}` first.",
-            args.slug, args.slug,
+            args.slug,
+            args.slug,
         );
         return Ok(4);
     }
     if matches.len() > 1 {
-        eprintln!(
+        tracing::error!(
             "hm: slug `{}` matches multiple live sessions; pass --session <id>",
             args.slug
         );