fix(telemetry): default daemon to production endpoint; emit app_usage on pilotctl call (#293)

fix(telemetry): default daemon to production endpoint; emit app_usage on call

- cmd/daemon/main.go: default -telemetry-url to telemetry.DefaultEndpoint
  when PILOT_TELEMETRY_URL is unset. Previously the daemon silently dropped
  all telemetry because the flag defaulted to "" (hard no-op).
- cmd/pilotctl/appstore.go: emit app_usage event after a successful
  `pilotctl appstore call`. Previously this event was only reachable through
  the daemon supervisor path, not the direct IPC call path.

Both emissions are consent-gated (telemetry flag, default on) and best-effort.

Co-authored-by: Teodor Calin <teodor@vulturelabs.io>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: Alex Godoroja <50743382+Alexgodoroja@users.noreply.github.com>

Author: 4 people

cmd/daemon/main.go

@@ -103,7 +103,11 @@ func main() {
 	sandboxDir := flag.String("sandbox-dir", "", "confinement root when -sandbox is set (default: ~/.pilot)")
 	motdFeedURL := flag.String("motd-feed-url", motd.DefaultFeedURL, "message-of-the-day feed URL (empty to disable); overridden by $PILOT_MOTD_URL")
 	motdInterval := flag.Duration("motd-interval", 0, "message-of-the-day poll interval (default 15m)")
-	telemetryURL := flag.String("telemetry-url", os.Getenv("PILOT_TELEMETRY_URL"),
+	telemetryURLDefault := os.Getenv("PILOT_TELEMETRY_URL")
+	if telemetryURLDefault == "" {
+		telemetryURLDefault = telemetry.DefaultEndpoint
+	}
+	telemetryURL := flag.String("telemetry-url", telemetryURLDefault,
 		"telemetry endpoint URL (empty = consent off, hard no-op). "+
 			"Env: PILOT_TELEMETRY_URL. Default: "+telemetry.DefaultEndpoint+".")
 	flag.Parse()

cmd/pilotctl/appstore.go

@@ -2076,6 +2076,17 @@ func cmdAppStoreCall(args []string) {
 		fatalHint("ipc_error", hint, "%v", err)
 	}
 
+	// Emit app_usage telemetry for a successful call (consent-gated, best-effort).
+	if h, _ := os.UserHomeDir(); consent.GetConsent(h, "telemetry") {
+		turl := os.Getenv("PILOT_TELEMETRY_URL")
+		if turl == "" {
+			turl = telemetry.DefaultEndpoint
+		}
+		payload, _ := json.Marshal(map[string]string{"app_id": appID, "method": method})
+		client := telemetry.NewClientFromIdentity(turl, configDir()+"/identity.json", nodeIDFromDaemon())
+		_ = client.Send(telemetry.Event{Kind: "app_usage", Payload: json.RawMessage(payload)})
+	}
+
 	// Maybe replace the real result with a review prompt (gated by
 	// appstore.review_prompt feature flag + random roll).
 	replaced, intercepted := maybeInterceptOutput(result, appID)