feat(daemon): wire app-usage telemetry for app-store supervisor (PILOT-402)

The appstoreAdapter now holds telemetryURL and identityPath, using them
to create a consent-gated telemetry.Client on Start. The client is
wrapped in an telemetryEmitter that satisfies appstore.TelemetryEmitter,
passing app_usage events from supervisor.callFrom into the signed
telemetry pipeline.

When consent is off (empty telemetry URL) the client is a permanent
no-op — no goroutines, no dials, no buffering.

Related: app-store module also updated for PILOT-402 (commit
8edfed7efa72e78499f02260ea84ae42b724f49a).

Author: matthew-pilot

cmd/daemon/appstore_adapter.go

@@ -15,25 +15,60 @@ package main
 
 import (
 	"context"
+	"encoding/json"
+	"time"
 
 	"github.com/pilot-protocol/app-store/plugin/appstore"
 	"github.com/pilot-protocol/common/coreapi"
+	"github.com/TeoSlayer/pilotprotocol/pkg/telemetry"
 )
 
 type appstoreAdapter struct {
-	svc *appstore.Service
+	svc          *appstore.Service
+	telemetryURL string
+	identityPath string
+}
+
+// telemetryEmitter wraps the consent-gated telemetry client to satisfy
+// the appstore.TelemetryEmitter interface. Events are sent as
+// "app_usage" kind with the supervisor-provided fields as payload.
+// Best-effort: send errors are logged but never block the caller.
+type telemetryEmitter struct {
+	client *telemetry.Client
+}
+
+func (e *telemetryEmitter) Emit(ev appstore.TelemetryEvent) {
+	if e == nil || e.client == nil {
+		return
+	}
+	payload, err := json.Marshal(ev)
+	if err != nil {
+		return
+	}
+	_ = e.client.Send(telemetry.Event{
+		Kind:    "app_usage",
+		TS:      time.Now().UTC().Format(time.RFC3339),
+		Payload: payload,
+	})
 }
 
 func (a *appstoreAdapter) Name() string { return a.svc.Name() }
 func (a *appstoreAdapter) Order() int   { return a.svc.Order() }
 func (a *appstoreAdapter) Start(ctx context.Context, deps coreapi.Deps) error {
+	// Build a consent-gated telemetry client for app-usage events.
+	// When the URL is empty or identity is absent the client is a
+	// permanent no-op — the emitter never sends anything.
+	client := telemetry.NewClientFromIdentity(a.telemetryURL, a.identityPath, 0)
+	emitter := &telemetryEmitter{client: client}
+
 	return a.svc.Start(ctx, appstore.Deps{
-		Streams:  deps.Streams,
-		Identity: deps.Identity,
-		Resolver: deps.Resolver,
-		Events:   deps.Events,
-		Logger:   deps.Logger,
-		Trust:    deps.Trust,
+		Streams:   deps.Streams,
+		Identity:  deps.Identity,
+		Resolver:  deps.Resolver,
+		Events:    deps.Events,
+		Logger:    deps.Logger,
+		Trust:     deps.Trust,
+		Telemetry: emitter,
 	})
 }
 func (a *appstoreAdapter) Stop(ctx context.Context) error { return a.svc.Stop(ctx) }

cmd/daemon/main.go

@@ -307,13 +307,29 @@ func main() {
 	if home, herr := os.UserHomeDir(); herr == nil {
 		appstoreInstallRoot = filepath.Join(home, ".pilot", "apps")
 	}
-	if err := rt.Register(&appstoreAdapter{svc: appstore.NewService(appstore.Config{
-		InstallRoot:    appstoreInstallRoot,
-		RescanInterval: 2 * time.Second,
-		// Real catalogue trust anchor (replaces the all-zeros
-		// placeholder default): the embedded ed25519 catalogue key.
-		CatalogPubkey: []byte(catalogtrust.PublicKey()),
-	})}); err != nil {
+	// The app-usage telemetry emitter shares the daemon's identity file
+	// and telemetry URL. When consent is off (empty URL) the client is
+	// a permanent no-op — no goroutines, no dials, no buffering.
+	idPath := *identityPath
+	if idPath == "" {
+		if home, herr := os.UserHomeDir(); herr == nil {
+			defaultID := filepath.Join(home, ".pilot", "identity.json")
+			if _, serr := os.Stat(defaultID); serr == nil {
+				idPath = defaultID
+			}
+		}
+	}
+	if err := rt.Register(&appstoreAdapter{
+		svc: appstore.NewService(appstore.Config{
+			InstallRoot:    appstoreInstallRoot,
+			RescanInterval: 2 * time.Second,
+			// Real catalogue trust anchor (replaces the all-zeros
+			// placeholder default): the embedded ed25519 catalogue key.
+			CatalogPubkey: []byte(catalogtrust.PublicKey()),
+		}),
+		telemetryURL: *telemetryURL,
+		identityPath: idPath,
+	}); err != nil {
 		log.Fatalf("register appstore: %v", err)
 	}
 

go.mod

@@ -4,7 +4,7 @@ go 1.25.10
 
 require (
 	github.com/coder/websocket v1.8.14
-	github.com/pilot-protocol/app-store v1.0.1-beta.1.0.20260609061942-8852c785a264
+	github.com/pilot-protocol/app-store v1.0.1-beta.1.0.20260616142430-8edfed7efa72
 	github.com/pilot-protocol/beacon v0.2.6
 	github.com/pilot-protocol/common v0.4.9-0.20260615113553-d5cbbfb3e5b6
 	github.com/pilot-protocol/dataexchange v0.2.1-beta.1.0.20260615113607-fac933edea98
@@ -18,7 +18,7 @@ require (
 	github.com/pilot-protocol/trustedagents v0.2.3
 	github.com/pilot-protocol/updater v0.2.2-0.20260529065627-220ed5b8383f
 	github.com/pilot-protocol/webhook v0.2.0
-	golang.org/x/sys v0.45.0
+	golang.org/x/sys v0.46.0
 )
 
 require (

go.sum

@@ -8,6 +8,8 @@ github.com/pilot-protocol/app-store v1.0.0-rc1.0.20260609015400-d02db7da3924 h1:
 github.com/pilot-protocol/app-store v1.0.0-rc1.0.20260609015400-d02db7da3924/go.mod h1:f0umeJxswDG8/CctHpSFMlr5GLtE2GlPKkijIQErZuc=
 github.com/pilot-protocol/app-store v1.0.1-beta.1.0.20260609061942-8852c785a264 h1:NL9rFdakbVQ0V7xfJbCk8RJZSaQ1AmvdhAJwFIouMsk=
 github.com/pilot-protocol/app-store v1.0.1-beta.1.0.20260609061942-8852c785a264/go.mod h1:zoCxHYoNdj0V44OkG3Yzcye0jnwZDVUcJgAvR5Z1kwc=
+github.com/pilot-protocol/app-store v1.0.1-beta.1.0.20260616142430-8edfed7efa72 h1:vDiQ7ZheKIzlNqfviu5zeQzGVTMP63k1hC5HodEuyeQ=
+github.com/pilot-protocol/app-store v1.0.1-beta.1.0.20260616142430-8edfed7efa72/go.mod h1:leZPtX43gE2JB7xeljexXri81g6qhdZfYExLtzI+bhg=
 github.com/pilot-protocol/beacon v0.2.5 h1:5+pkSPoA35r+u4Hfrph/ZfOltOyiy8lh1sCfK5XqXKs=
 github.com/pilot-protocol/beacon v0.2.5/go.mod h1:I/UhEv097g1z/qtAVDZbEhf3R5tzM0Dp71vGHah52A4=
 github.com/pilot-protocol/beacon v0.2.6 h1:grxwaVyPRUT0W6coyjYfNkO0rpzOIrwrKn94S21DuVE=
@@ -56,3 +58,5 @@ golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8=
 golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww=
 golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY=
 golang.org/x/sys v0.45.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
+golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw=
+golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=