- {/* jscpd:ignore-start -- the text preview's header row; see `usePathClipped`. */}
{
expect(view.container.querySelector('[data-files-state="tree"]')?.getAttribute('data-files-root')).toBe(ROOT)
const path = view.container.querySelector('[data-files-path]')
expect(path?.getAttribute('title')).toBe(ROOT)
- expect([...path?.querySelectorAll('span > span') ?? []].map(span => span.textContent)).toEqual(['/work/', 'app'])
+ expect([...path?.firstElementChild?.children ?? []].map(span => span.textContent)).toEqual(['/work/', 'app'])
expect(names(view.container)).toEqual([`${ROOT}/src`, `${ROOT}/.env`, `${ROOT}/pipe`, `${ROOT}/README.md`])
const envIcon = view.container.querySelector(`[data-files-path="${ROOT}/.env"] svg`)?.innerHTML
const readmeIcon = view.container.querySelector(`[data-files-path="${ROOT}/README.md"] svg`)?.innerHTML
@@ -56,7 +56,7 @@ describe('FilesBody', () => {
await act(() => script.watches.ready('/'))
await act(() => script.settle({ ok: true, value: ROOT_LEVEL }))
const path = view.container.querySelector('[data-files-path]')
- expect([...path?.querySelectorAll('span > span') ?? []].map(span => span.textContent)).toEqual(['/'])
+ expect([...path?.firstElementChild?.children ?? []].map(span => span.textContent)).toEqual(['/'])
expect(names(view.container)).toEqual(['/src', '/.env', '/pipe', '/README.md'])
})
@@ -86,7 +86,7 @@ describe('FilesBody', () => {
await act(() => script.settle({ ok: true, value: ROOT_LEVEL }))
const path = view.container.querySelector
('[data-files-path]')
const text = path?.firstElementChild
- expect(path?.hasAttribute('data-files-path-clipped')).toBe(false)
+ expect(path?.hasAttribute('data-path-clipped')).toBe(false)
const observer = FakeResizeObserver.latest
if (observer === undefined) throw new Error('expected the path to observe its size')
expect(observer.observe).toHaveBeenCalledWith(path)
@@ -94,11 +94,11 @@ describe('FilesBody', () => {
boxWidth = 120
act(() => { observer.fire() })
- expect(path?.hasAttribute('data-files-path-clipped')).toBe(true)
+ expect(path?.hasAttribute('data-path-clipped')).toBe(true)
boxWidth = 300
act(() => { observer.fire() })
- expect(path?.hasAttribute('data-files-path-clipped')).toBe(false)
+ expect(path?.hasAttribute('data-path-clipped')).toBe(false)
view.unmount()
expect(observer.disconnect).toHaveBeenCalledTimes(1)
} finally {
diff --git a/packages/extensions/tool-cordis/src/api-catalog.ts b/packages/extensions/tool-cordis/src/api-catalog.ts
index cc7c901ef3..0771d0ad57 100644
--- a/packages/extensions/tool-cordis/src/api-catalog.ts
+++ b/packages/extensions/tool-cordis/src/api-catalog.ts
@@ -1567,6 +1567,18 @@ export const SERVICE_API: readonly ServiceApiEntry[] = [
},
],
},
+ {
+ key: 'productTelemetry',
+ summary: 'Host analytics sender.',
+ description: 'Host analytics sender. Mounting alone sends nothing; the owning fiber drains it on unload.',
+ methods: [
+ {
+ signature: 'emit(record: ProductTelemetryRecord): void',
+ description: 'Enqueue one selected product event without waiting for network delivery. Queue admission and shutdown completion are not collector or warehouse acknowledgements.',
+ parameters: [{ name: 'record', description: 'caller-owned event containing only approved analytics fields.' }],
+ },
+ ],
+ },
{
key: 'profileContext',
summary: 'Current profile facts; scheduling and mutation belong to their callers.',
@@ -5582,6 +5594,14 @@ export const TYPE_API: readonly TypeApiEntry[] = [
name: 'PreToolDecision',
declaration: 'export type PreToolDecision = {\n kind: \'allow\';\n} | {\n kind: \'deny\';\n reason: string;\n info?: ToolErrorInfo;\n} | {\n kind: \'cancel\';\n} | {\n kind: \'ask\';\n reason?: string;\n};',
},
+ {
+ name: 'ProductTelemetryRecord',
+ declaration: 'export interface ProductTelemetryRecord {\n eventName: string;\n body: string;\n timestamp: number;\n severityNumber?: SeverityNumber;\n attributes?: Record>;\n}',
+ },
+ {
+ name: 'ProductTelemetryScalar',
+ declaration: 'export type ProductTelemetryScalar = string | number | boolean;',
+ },
{
name: 'ProfilePnpmInvocation',
declaration: 'export interface ProfilePnpmInvocation {\n readonly command: string;\n readonly args: readonly string[];\n readonly env: Readonly>;\n}',
diff --git a/packages/host/README.i18n.yaml b/packages/host/README.i18n.yaml
index 0c7ec8a7e2..c45b78cfa1 100644
--- a/packages/host/README.i18n.yaml
+++ b/packages/host/README.i18n.yaml
@@ -2,5 +2,5 @@
# side as of the last confirmed-consistent state. Both languages carry equal authority;
# after editing either side, bring the other along and re-record with:
# pnpm run verify-translation-pairing --write packages/host/README.md
-README.md: 0b595eb7e63f33ed8e11ec0f39438f5d79b6ab33
-README.zh.md: 6a7507b7d8d2b2d791952783235a80280c8c0408
+README.md: f5e7832539404b8fb1fb856973f08d5dd5c87eb5
+README.zh.md: 402358f4f4097630ba8deda4551d6bc52ff01b11
diff --git a/packages/host/README.md b/packages/host/README.md
index 0b595eb7e6..f5e7832539 100644
--- a/packages/host/README.md
+++ b/packages/host/README.md
@@ -1,5 +1,5 @@
---
-description: "Package map for the web GUI host half: the HTTP and SPA servers, workspace-directory picking implementations, the open-in-app launch routes, and the plugin inventory projection."
+description: "Package map for the web GUI host half: the HTTP and SPA servers, workspace-directory picking implementations, the open-in-app launch routes, the plugin inventory projection, and explicit product event reporting."
kind: "package-group"
---
@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
## Summary
-The `host/` group provides the web GUI's plain HTTP server, the SPA dist server that serves the built Web shell, the workspace-directory picking seam with its native, browse, and adaptive composition packages, the open-in-app application probe and launch routes, and the read-only plugin inventory projection. All eight packages are product packages; the browser transport lives in [`client/`](../client/README.md), and the composed application is [`apps/cli`](../../apps/cli/README.md) booting the [`dsh-base` bundle](../bundle/base/cordis.patch.yml) that serves the web app under `apps/web/`. The picker backends replace one another behind the shared seam.
+The `host/` group provides the web GUI's plain HTTP server, the SPA dist server that serves the built Web shell, the workspace-directory picking seam with its native, browse, and adaptive composition packages, the open-in-app application probe and launch routes, the read-only plugin inventory projection, and explicit product event reporting. These packages are product packages; the browser transport lives in [`client/`](../client/README.md), and the composed application is [`apps/cli`](../../apps/cli/README.md) booting the [`dsh-base` bundle](../bundle/base/cordis.patch.yml) that serves the web app under `apps/web/`. The picker backends replace one another behind the shared seam.
## Table of Contents
@@ -22,7 +22,7 @@ The `host/` group provides the web GUI's plain HTTP server, the SPA dist server
## Packages
-Eight packages play the host roles; each package README owns its contract and configuration.
+The packages play the host roles; each package README owns its contract and configuration.
| Package | Role | ctx key |
|---|---|---|
@@ -34,6 +34,7 @@ Eight packages play the host roles; each package README owns its contract and co
| [`directory-picker-auto/`](directory-picker-auto/README.md) | Host-adaptive chooser that mounts the matching backend at boot | mounts a backend |
| [`open-in-app/`](open-in-app/README.md) | Application probe, icon, and launch routes opening the workspace directory in an installed application | consumes `ctx.webServer` |
| [`plugin-inventory/`](plugin-inventory/README.md) | Read-only projection of current Loader entries | Remote `pluginInventory/list` |
+| [`product-telemetry-otel/`](product-telemetry-otel/README.md) | Explicit product usage events over OTLP/HTTP | `ctx.productTelemetry` |
-----
@@ -45,6 +46,7 @@ Start with the subsystem references for the transport and the workspace records,
- [HTTP server subsystem](../../docs/subsystems/web-server.md) — the webserver's routes, matching order, and config.
- [Workspace subsystem](../../docs/subsystems/workspace.md) — the workspace records the directory picker feeds.
- [Web config-tree boot and transport layering](../../.agents/notes/implemented/architecture/2026-07-24-web-config-tree-boot-and-transport-layering.md) — ownership of the Web transport layers.
+- [Product telemetry](../../docs/subsystems/product-telemetry.md) — explicit analytics event submission.
## Dev Note
diff --git a/packages/host/README.zh.md b/packages/host/README.zh.md
index 6a7507b7d8..402358f4f4 100644
--- a/packages/host/README.zh.md
+++ b/packages/host/README.zh.md
@@ -1,5 +1,5 @@
---
-description: "Web GUI Host 侧的包映射:HTTP 与 SPA 服务器、工作区目录选择实现、open-in-app 启动路由和插件清单投影。"
+description: "Web GUI Host 侧的包映射:HTTP 与 SPA 服务器、工作区目录选择实现、open-in-app 启动路由、插件清单投影和显式产品事件上报。"
kind: "package-group"
---
@@ -9,7 +9,7 @@ kind: "package-group"
## 概述
-`host/` 组提供 Web GUI 的普通 HTTP 服务器、服务已构建 Web 壳的 SPA dist 服务器、带原生/浏览/自适应组合包的工作区目录选择 seam、open-in-app 的应用探测与启动路由,以及只读的插件清单投影。这八个包都是产品包;浏览器传输位于 [`client/`](../client/README.zh.md),组合应用是 [`apps/cli`](../../apps/cli/README.zh.md),它启动 [`dsh-base` 组合包](../bundle/base/cordis.patch.yml) 来提供 `apps/web/` 下的 Web 应用。选择器后端可在共享 seam 后互相替换。
+`host/` 组提供 Web GUI 的普通 HTTP 服务器、服务已构建 Web 壳的 SPA dist 服务器、带原生/浏览/自适应组合包的工作区目录选择 seam、open-in-app 的应用探测与启动路由,只读的插件清单投影以及显式产品事件上报。这些包都是产品包;浏览器传输位于 [`client/`](../client/README.zh.md),组合应用是 [`apps/cli`](../../apps/cli/README.zh.md),它启动 [`dsh-base` 组合包](../bundle/base/cordis.patch.yml) 来提供 `apps/web/` 下的 Web 应用。选择器后端可在共享 seam 后互相替换。
## 目录
@@ -22,7 +22,7 @@ kind: "package-group"
## 包
-八个包分别承担 Host 角色;各包的 README 拥有自己的约定与配置。
+各包分别承担 Host 角色;各包的 README 拥有自己的约定与配置。
| 包 | 职责 | ctx 键 |
|---|---|---|
@@ -34,6 +34,7 @@ kind: "package-group"
| [`directory-picker-auto/`](directory-picker-auto/README.zh.md) | 在启动时挂载匹配后端的宿主自适应选择器 | 挂载一个后端 |
| [`open-in-app/`](open-in-app/README.zh.md) | 在已安装应用中打开 workspace 目录的应用探测、图标与启动路由 | 消费 `ctx.webServer` |
| [`plugin-inventory/`](plugin-inventory/README.zh.md) | 当前 Loader 条目的只读投影 | Remote `pluginInventory/list` |
+| [`product-telemetry-otel/`](product-telemetry-otel/README.zh.md) | 通过 OTLP/HTTP 显式上报产品使用事件 | `ctx.productTelemetry` |
-----
@@ -45,6 +46,7 @@ kind: "package-group"
- [HTTP 服务器子系统](../../docs/subsystems/web-server.zh.md)——webserver 的路由、匹配顺序与配置。
- [工作区子系统](../../docs/subsystems/workspace.zh.md)——目录选择器所喂给的工作区记录。
- [Web 配置树启动与传输分层](../../.agents/notes/implemented/architecture/2026-07-24-web-config-tree-boot-and-transport-layering.zh.md)——Web 传输各层的所有权。
+- [产品埋点](../../docs/subsystems/product-telemetry.zh.md)——显式提交分析事件。
## 开发备注
diff --git a/packages/host/product-telemetry-otel/README.i18n.yaml b/packages/host/product-telemetry-otel/README.i18n.yaml
new file mode 100644
index 0000000000..ea4a841892
--- /dev/null
+++ b/packages/host/product-telemetry-otel/README.i18n.yaml
@@ -0,0 +1,6 @@
+# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
+# side as of the last confirmed-consistent state. Both languages carry equal authority;
+# after editing either side, bring the other along and re-record with:
+# pnpm run verify-translation-pairing --write packages/host/product-telemetry-otel/README.md
+README.md: af1f2c415fc21db874abc7bb0d9e25c7149fcabf
+README.zh.md: ffdb682d9a8a0a4bf406f71322e062f14b666cf2
diff --git a/packages/host/product-telemetry-otel/README.md b/packages/host/product-telemetry-otel/README.md
new file mode 100644
index 0000000000..af1f2c415f
--- /dev/null
+++ b/packages/host/product-telemetry-otel/README.md
@@ -0,0 +1,108 @@
+---
+description: "Configure explicit product usage events, OTLP/HTTP routing, batching, and shutdown limits."
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-host-product-telemetry-otel
+
+English | [中文](README.zh.md)
+
+## Summary
+
+Send selected product usage events to an OTLP/HTTP collector. Events carry a name, string summary, occurrence time, and scalar or one-level object attributes. Mounting the plugin collects nothing automatically; applications explicitly submit each event. Delivery is best effort and does not confirm warehouse ingestion.
+
+## Table of Contents
+
+- [Use this package](#use-this-package)
+- [Understand the implementation](#understand-the-implementation)
+- [Further Exploration](#further-exploration)
+- [Model Experience](#model-experience)
+- [Known Limitations and Deferred Work](#known-limitations-and-deferred-work)
+- [Dev Note](#dev-note)
+
+-----
+
+
+## Use this package
+
+Mount the plugin in a Cordis composition with the application identity; override the collector endpoint when needed. The shipped profiles do not mount it. Set `DSH_APP_VERSION` to the running application release version in the launcher environment; the schema rejects an absent version.
+
+```yaml
+- name: '@deepseek-ai/dsh-host-product-telemetry-otel'
+ config:
+ endpoint: https://dsh-otel-collector.deepseeksvc.com/v1/logs
+ serviceName: deepseek-harness
+ serviceVersion: !!js process.env.DSH_APP_VERSION
+ compression: gzip
+ scheduledDelayMillis: 30000
+```
+
+| Field | Default | Meaning |
+|---|---|---|
+| `endpoint` | `https://dsh-otel-collector.deepseeksvc.com/v1/logs` | Full HTTP(S) logs URL |
+| `serviceName`, `serviceVersion` | required | Application identity on the OTel resource |
+| `channel` | `dsh_otel_report` | Collector `x-channel` header |
+| `compression` | SDK environment | `gzip` or `none`; omission honors OTel compression environment variables |
+| `maxExportBatchSize`, `maxQueueSize` | `512`, `2048` | Record-count limits; batch size cannot exceed queue size |
+| `scheduledDelayMillis` | `30000` | Partial-batch export interval |
+| `timeoutMillis` | `15000` | Exporter HTTP and retry deadline |
+| `exportTimeoutMillis` | `20000` | Processor batch export deadline |
+| `shutdownTimeoutMillis` | `21000` | Outer wait for shutdown; expiry reports possible loss |
+
+The default endpoint routes explicitly submitted events to the production product collector. Test and custom deployments must override it. Only `x-channel` and SDK protocol headers reach the collector; ambient OTel headers and client certificates are not inherited.
+
+The 30-second interval batches product events; the exporter has a 15-second retry window inside the processor’s 20-second batch deadline. The outer 21-second wait bounds plugin disposal, including SDK `forceFlush()` work that the processor deadline does not cover. An unreachable collector can delay disposal for the full 21 seconds. A full 2,048-record queue requires four 512-record batches and may not drain before that deadline. Interactive compositions needing a shorter exit should override these budgets; neither configuration guarantees delivery.
+
+Consumers inject `productTelemetry` and call `emit()` with explicitly selected analytics fields. Event names and field semantics belong to their product and analytics owners. The plugin reads no Session, account, credential, or device identifier. Callers must exclude prompts, responses, file contents, credentials, and other unapproved values.
+
+The collector expects a string body and attributes containing strings, numbers, booleans, or objects of those scalars. Callers supply occurrence time in milliseconds; the plugin assigns observation time and defaults severity to INFO. Invalid transport configuration fails at activation. Export failures produce local warnings without making event submission wait for the network.
+
+-----
+
+
+## Understand the implementation
+
+
+Implementation internals — click to expand
+
+A private OTel logger feeds `BatchLogRecordProcessor` and the SDK HTTP delegate with its JSON log serializer. The delegate receives explicit headers and an HTTP agent; only shared timeout and compression settings use SDK environment resolution. The direct `@opentelemetry/core` dependency matches `sdk-logs` at 2.9.0 so exporter result enums share one TypeScript identity. The SDK owns queueing, transient-error retries, and compression; plugin disposal drains pending records with a bounded wait. Export completion is observed separately because SDK shutdown can resolve after a rejected export. No global OTel provider is installed.
+
+[`src/index.ts`](src/index.ts) owns configuration and submission. No runtime invariant companion is published: delivery has no independent local acknowledgement to compare with the SDK's queue.
+
+
+
+-----
+
+
+## Further Exploration
+
+- [Product telemetry](../../../docs/subsystems/product-telemetry.md) — consumer types and service reference.
+- [Session telemetry](../../session/session-telemetry-otel/README.md) — separate feedback-authorized Session reporting.
+- [Testing policy](../../../docs/testing.md) — Loader composition and network fixtures.
+
+-----
+
+
+## Model Experience
+
+None, as the plugin exports explicit analytics records without contributing model context.
+
+#### KV Cache effect
+
+None; event submission does not change model requests.
+
+## Known Limitations and Deferred Work
+
+
+
+Delivery and collection remain limited to the following capabilities.
+
+- Callers own event selection, renderer-to-host transport, and any permitted identity attributes.
+- The queue is memory-only; overflow, network failure, and process exit can lose events. There is no durable outbox or warehouse acknowledgement.
+- The SDK batches by record count, not encoded bytes. Callers must keep records within the collector's 4 MB limit and choose batch sizes appropriate to the receiver.
+- Caller-selected strings are not redacted automatically. This package does not decide product disclosure or consent policy.
+
+
+### Dev Note
+
+None.
diff --git a/packages/host/product-telemetry-otel/README.zh.md b/packages/host/product-telemetry-otel/README.zh.md
new file mode 100644
index 0000000000..ffdb682d9a
--- /dev/null
+++ b/packages/host/product-telemetry-otel/README.zh.md
@@ -0,0 +1,108 @@
+---
+description: "配置显式产品使用事件、OTLP/HTTP 路由、批量发送与退出等待上限。"
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-host-product-telemetry-otel
+
+[English](README.md) | 中文
+
+## 概述
+
+将选定的产品使用事件发送到 OTLP/HTTP 接收服务。事件包含名称、字符串摘要、发生时间,以及标量或单层对象属性。挂载插件不会自动采集信息;应用需要显式提交每个事件。发送采用尽力而为方式,不代表数据已入仓。
+
+## 目录
+
+- [使用本包](#use-this-package)
+- [理解实现](#understand-the-implementation)
+- [延伸阅读](#further-exploration)
+- [模型体验](#model-experience)
+- [已知限制与待办工作](#known-limitations-and-deferred-work)
+- [开发备注](#dev-note)
+
+-----
+
+
+## 使用本包
+
+在 Cordis 组合中挂载插件并提供应用标识;需要时可覆盖接收地址。内置 profile 不挂载本插件。启动器环境须将 `DSH_APP_VERSION` 设为运行中应用的发布版本;缺少版本时 schema 会拒绝配置。
+
+```yaml
+- name: '@deepseek-ai/dsh-host-product-telemetry-otel'
+ config:
+ endpoint: https://dsh-otel-collector.deepseeksvc.com/v1/logs
+ serviceName: deepseek-harness
+ serviceVersion: !!js process.env.DSH_APP_VERSION
+ compression: gzip
+ scheduledDelayMillis: 30000
+```
+
+| 字段 | 默认值 | 含义 |
+|---|---|---|
+| `endpoint` | `https://dsh-otel-collector.deepseeksvc.com/v1/logs` | 完整 HTTP(S) 日志地址 |
+| `serviceName`, `serviceVersion` | 必填 | OTel resource 中的应用标识 |
+| `channel` | `dsh_otel_report` | 接收服务的 `x-channel` 请求头 |
+| `compression` | SDK 环境变量 | `gzip` 或 `none`;省略时遵循 OTel 压缩环境变量 |
+| `maxExportBatchSize`, `maxQueueSize` | `512`, `2048` | 记录条数上限;批次大小不能超过队列大小 |
+| `scheduledDelayMillis` | `30000` | 不满批次时的发送间隔 |
+| `timeoutMillis` | `15000` | Exporter HTTP 发送与重试的超时时间 |
+| `exportTimeoutMillis` | `20000` | Processor 批次导出的超时时间 |
+| `shutdownTimeoutMillis` | `21000` | 退出时的等待上限;超时会提示可能丢失数据 |
+
+默认接收地址将显式提交的事件发送到生产产品 collector,测试和自定义部署必须覆盖该地址。只向 collector 发送 `x-channel` 和 SDK 协议请求头,不继承宿主 OTel 请求头或客户端证书。
+
+30 秒间隔用于批量发送产品事件;exporter 的 15 秒重试窗口位于 processor 的 20 秒批次期限内。外层 21 秒等待限制插件卸载时间,包括 processor 期限未覆盖的 SDK `forceFlush()`。collector 不可达时,卸载可能等待完整的 21 秒。2,048 条满队列需要四个 512 条批次,可能无法在期限前排空。要求更快退出的交互式应用组合应覆盖这些时间配置;两种配置都不保证送达。
+
+消费方注入 `productTelemetry`,调用 `emit()` 提交明确选定的分析字段。事件名称与字段含义由产品和数据分析负责人定义。插件不读取 Session、账号、凭证或设备标识。调用方必须排除提示词、回答、文件内容、凭证及其他未经批准的数据。
+
+接收服务要求 body 为字符串,attributes 的值为字符串、数字、布尔值或由这些标量组成的对象。调用方以毫秒提供发生时间;插件填写观测时间,默认严重程度为 INFO。无效传输配置在激活时报错。发送失败产生本地警告,事件提交不等待网络。
+
+-----
+
+
+## 理解实现
+
+
+实现细节——点击展开
+
+私有 OTel logger 将记录交给 `BatchLogRecordProcessor`,再由 SDK HTTP delegate 和 JSON 日志序列化器发送。delegate 使用显式请求头和 HTTP agent,只有共享的超时与压缩配置使用 SDK 环境变量解析。直接依赖的 `@opentelemetry/core` 与 `sdk-logs` 对齐为 2.9.0,使导出结果枚举共享同一个 TypeScript 类型身份。SDK 负责队列、临时错误重试与压缩;插件卸载时在限定时间内发送剩余记录。发送完成结果单独观测,因为 SDK 在发送被拒绝后仍可能正常完成退出。不安装全局 OTel provider。
+
+[`src/index.ts`](src/index.ts) 负责配置与提交。不发布运行时不变量伴随模块:本地没有独立的送达确认可与 SDK 队列比较。
+
+
+
+-----
+
+
+## 延伸阅读
+
+- [产品埋点](../../../docs/subsystems/product-telemetry.zh.md)——消费方类型与服务参考。
+- [会话上报](../../session/session-telemetry-otel/README.zh.md)——独立的、由反馈授权的 Session 上报。
+- [测试策略](../../../docs/testing.zh.md)——Loader 组合与网络测试夹具。
+
+-----
+
+
+## 模型体验
+
+无,因为插件仅发送显式分析记录,不提供模型上下文。
+
+#### KV Cache 影响
+
+无;提交事件不会改变模型请求。
+
+## 已知限制与待办工作
+
+
+
+发送和采集受以下能力限制。
+
+- 调用方拥有事件选择、渲染进程到宿主的传输以及获准使用的标识属性。
+- 队列仅存在于内存;队列溢出、网络故障和进程退出可能丢失事件。没有持久发件箱或入仓确认。
+- SDK 按记录条数而非编码字节数分批。调用方必须确保记录不超过接收服务的 4 MB 限制,并选择接收服务适用的批次大小。
+- 不自动脱敏调用方选择的字符串。本包不决定产品告知或同意策略。
+
+
+### 开发备注
+
+无。
diff --git a/packages/host/product-telemetry-otel/package.json b/packages/host/product-telemetry-otel/package.json
new file mode 100644
index 0000000000..2bcdeb691b
--- /dev/null
+++ b/packages/host/product-telemetry-otel/package.json
@@ -0,0 +1,48 @@
+{
+ "name": "@deepseek-ai/dsh-host-product-telemetry-otel",
+ "description": "Explicit product usage events exported through OpenTelemetry HTTP logs",
+ "version": "0.1.6-alpha.2",
+ "publishConfig": {
+ "access": "public"
+ },
+ "repository": {
+ "type": "git",
+ "url": "git+https://github.com/deepseek-ai/deepseek-harness.git",
+ "directory": "packages/host/product-telemetry-otel"
+ },
+ "type": "module",
+ "main": "lib/index.js",
+ "types": "lib/types/index.d.ts",
+ "exports": {
+ ".": {
+ "types": "./lib/types/index.d.ts",
+ "default": "./lib/index.js"
+ },
+ "./src/*": "./src/*",
+ "./package.json": "./package.json"
+ },
+ "files": [
+ "lib/index.js",
+ "lib/types/**/*.d.ts"
+ ],
+ "license": "MIT",
+ "dependencies": {
+ "@deepseek-ai/schemastery": "workspace:^",
+ "@opentelemetry/api": "^1.9.1",
+ "@opentelemetry/api-logs": "^0.220.0",
+ "@opentelemetry/core": "2.9.0",
+ "@opentelemetry/otlp-exporter-base": "^0.220.0",
+ "@opentelemetry/otlp-transformer": "^0.220.0",
+ "@opentelemetry/resources": "^2.9.0",
+ "@opentelemetry/sdk-logs": "^0.220.0"
+ },
+ "peerDependencies": {
+ "@deepseek-ai/cordis": "workspace:^"
+ },
+ "devDependencies": {
+ "@deepseek-ai/cordis": "workspace:^",
+ "@deepseek-ai/cordis-plugin-loader": "workspace:^",
+ "@deepseek-ai/dsh-app-boot": "workspace:^",
+ "@deepseek-ai/dsh-loader-smoke": "workspace:^"
+ }
+}
diff --git a/packages/host/product-telemetry-otel/src/index.ts b/packages/host/product-telemetry-otel/src/index.ts
new file mode 100644
index 0000000000..eef6ec5dce
--- /dev/null
+++ b/packages/host/product-telemetry-otel/src/index.ts
@@ -0,0 +1,171 @@
+/** Explicit product usage events over OTLP/HTTP; no automatic collection or Session access. */
+import { Context, Service } from '@deepseek-ai/cordis'
+import z from '@deepseek-ai/schemastery'
+import { SeverityNumber, type Logger } from '@opentelemetry/api-logs'
+import { validateHeaderValue } from 'node:http'
+import { JsonLogsSerializer } from '@opentelemetry/otlp-transformer'
+import { createOtlpHttpExportDelegate, getSharedConfigurationFromEnvironment, httpAgentFactoryFromOptions } from '@opentelemetry/otlp-exporter-base/node-http'
+import { CompressionAlgorithm, getSharedConfigurationDefaults, mergeOtlpSharedConfigurationWithDefaults, OTLPExporterBase } from '@opentelemetry/otlp-exporter-base'
+import { ExportResultCode } from '@opentelemetry/core'
+import { resourceFromAttributes } from '@opentelemetry/resources'
+import { BatchLogRecordProcessor, LoggerProvider } from '@opentelemetry/sdk-logs'
+
+declare module '@deepseek-ai/cordis' {
+ interface Context {
+ productTelemetry: ProductTelemetry
+ }
+}
+
+/** Scalar values accepted by the collector's Arrow attributes map. */
+export type ProductTelemetryScalar = string | number | boolean
+
+/** Explicitly selected analytics fields; object values may contain scalars only. */
+export interface ProductTelemetryRecord {
+ /** Product/DA-owned event name. */
+ eventName: string
+ /** Human-readable summary; never a prompt, response, credential, or file contents. */
+ body: string
+ /** Event occurrence time in Unix milliseconds. Observation time is assigned on enqueue. */
+ timestamp: number
+ /** OTel severity; omitted values use INFO. */
+ severityNumber?: SeverityNumber
+ /** Business fields selected by the caller; no automatic device or account identity. */
+ attributes?: Record>
+}
+
+/** Collector routing, application identity, and bounded in-memory batch settings. */
+export interface Config {
+ /** Full HTTP(S) logs URL. */
+ endpoint: string
+ /** Collector routing header. */
+ channel: string
+ /** Resource service.name supplied by the application composition. */
+ serviceName: string
+ /** Resource service.version supplied by the application composition. */
+ serviceVersion: string
+ /** Omit to honor OTEL_EXPORTER_OTLP_LOGS_COMPRESSION / OTEL_EXPORTER_OTLP_COMPRESSION. */
+ compression?: 'none' | 'gzip'
+ /** Maximum records per export; must not exceed maxQueueSize. */
+ maxExportBatchSize: number
+ /** Maximum queued records; the SDK drops new records when full. */
+ maxQueueSize: number
+ /** Delay before exporting a partial batch. */
+ scheduledDelayMillis: number
+ /** Exporter HTTP deadline, including SDK transient-error retries. */
+ timeoutMillis: number
+ /** Processor deadline for one batch export. */
+ exportTimeoutMillis: number
+ /** Outer shutdown wait; pending exports may be lost after this deadline. */
+ shutdownTimeoutMillis: number
+}
+
+const positiveInteger = () => z.number().step(1).min(1).max(2_147_483_647)
+
+/** Loader validation and defaults for application compositions. */
+export const Config: z, Config> = z.object({
+ endpoint: z.string().default('https://dsh-otel-collector.deepseeksvc.com/v1/logs'),
+ channel: z.string().min(1).default('dsh_otel_report'),
+ serviceName: z.string().required(),
+ serviceVersion: z.string().required(),
+ compression: z.union(['none', 'gzip']),
+ maxExportBatchSize: positiveInteger().default(512),
+ maxQueueSize: positiveInteger().default(2048),
+ scheduledDelayMillis: positiveInteger().default(30000),
+ timeoutMillis: positiveInteger().default(15000),
+ exportTimeoutMillis: positiveInteger().default(20000),
+ shutdownTimeoutMillis: positiveInteger().default(21000),
+})
+
+/** Host analytics sender. Mounting alone sends nothing; the owning fiber drains it on unload. */
+export default class ProductTelemetry extends Service {
+ static Config = Config
+ private readonly logger: Logger
+
+ constructor(ctx: Context, config: Config) {
+ let endpoint: URL
+ try {
+ endpoint = new URL(config.endpoint)
+ } catch (cause) {
+ throw new Error('product-telemetry-otel: endpoint must be a valid HTTP(S) URL', { cause })
+ }
+ try {
+ validateHeaderValue('x-channel', config.channel)
+ } catch (cause) {
+ throw new Error('product-telemetry-otel: channel must be a valid HTTP header value', { cause })
+ }
+ if (!['http:', 'https:'].includes(endpoint.protocol)) {
+ throw new Error('product-telemetry-otel: endpoint must use HTTP or HTTPS')
+ }
+ if (config.maxExportBatchSize > config.maxQueueSize) {
+ throw new Error('product-telemetry-otel: maxExportBatchSize must not exceed maxQueueSize')
+ }
+ super(ctx, 'productTelemetry')
+ const shared = mergeOtlpSharedConfigurationWithDefaults({
+ timeoutMillis: config.timeoutMillis,
+ ...(config.compression === undefined ? {} : {
+ compression: config.compression === 'gzip' ? CompressionAlgorithm.GZIP : CompressionAlgorithm.NONE,
+ }),
+ }, getSharedConfigurationFromEnvironment('LOGS'), getSharedConfigurationDefaults())
+ const transport = {
+ ...shared,
+ url: config.endpoint,
+ // This collector must not inherit another endpoint's headers or TLS client identity.
+ headers: () => Promise.resolve({ 'Content-Type': 'application/json', 'x-channel': config.channel }),
+ agentFactory: httpAgentFactoryFromOptions({ keepAlive: true }),
+ }
+ const exporter = new OTLPExporterBase(createOtlpHttpExportDelegate(transport, JsonLogsSerializer))
+ const provider = new LoggerProvider({
+ resource: resourceFromAttributes({
+ 'service.name': config.serviceName,
+ 'service.version': config.serviceVersion,
+ }),
+ processors: [new BatchLogRecordProcessor({
+ maxExportBatchSize: config.maxExportBatchSize,
+ maxQueueSize: config.maxQueueSize,
+ scheduledDelayMillis: config.scheduledDelayMillis,
+ exportTimeoutMillis: config.exportTimeoutMillis,
+ exporter: {
+ export: (records, callback) => {
+ exporter.export(records, (result) => {
+ // SDK flush/shutdown can resolve after export failure; observe the actual completion.
+ if (result.code !== ExportResultCode.SUCCESS) ctx.logger.warn('Product telemetry export failed', result.error)
+ callback(result)
+ })
+ },
+ forceFlush: () => exporter.forceFlush(),
+ shutdown: () => exporter.shutdown(),
+ },
+ })],
+ })
+ this.logger = provider.getLogger('@deepseek-ai/dsh-host-product-telemetry-otel')
+ ctx.effect(() => async () => {
+ let timer!: ReturnType
+ const deadline = new Promise((resolve) => {
+ timer = setTimeout(() => {
+ ctx.logger.warn('Product telemetry shutdown deadline exceeded; pending events may be lost')
+ resolve()
+ }, config.shutdownTimeoutMillis)
+ })
+ try {
+ await Promise.race([provider.shutdown(), deadline])
+ } finally {
+ clearTimeout(timer)
+ }
+ })
+ }
+
+ /**
+ * Enqueue one selected product event without waiting for network delivery.
+ * Queue admission and shutdown completion are not collector or warehouse acknowledgements.
+ * @param record - caller-owned event containing only approved analytics fields.
+ */
+ emit(record: ProductTelemetryRecord): void {
+ const severityNumber = record.severityNumber ?? SeverityNumber.INFO
+ this.logger.emit({
+ ...record,
+ observedTimestamp: Date.now(),
+ severityNumber,
+ severityText: SeverityNumber[severityNumber],
+ })
+ }
+}
diff --git a/packages/host/product-telemetry-otel/tests/fixtures/driver.ts b/packages/host/product-telemetry-otel/tests/fixtures/driver.ts
new file mode 100644
index 0000000000..a0ad9389d8
--- /dev/null
+++ b/packages/host/product-telemetry-otel/tests/fixtures/driver.ts
@@ -0,0 +1,43 @@
+/** Loader composition with a loopback collector and one explicit synthetic event. */
+import { createServer } from 'node:http'
+import { once } from 'node:events'
+import { gunzipSync } from 'node:zlib'
+import { writeFile } from 'node:fs/promises'
+import type {} from '@deepseek-ai/dsh-host-product-telemetry-otel'
+import { bootProductionProfile } from '../../../../test-support/loader-smoke/tests/fixtures/production-profile.ts'
+
+const configPath = process.argv[2]
+if (configPath === undefined) throw new Error('product telemetry fixture requires an overlay')
+const captures: unknown[] = []
+const server = createServer((req, res) => {
+ const chunks: Buffer[] = []
+ req.on('data', chunk => chunks.push(chunk as Buffer))
+ req.on('end', () => {
+ const bytes = Buffer.concat(chunks)
+ const body: unknown = JSON.parse(gunzipSync(bytes).toString())
+ captures.push({ channel: req.headers['x-channel'], compression: req.headers['content-encoding'], body })
+ res.writeHead(200, { 'content-type': 'application/json' }).end('{}')
+ })
+})
+try {
+ server.listen(0, '127.0.0.1')
+ await once(server, 'listening')
+ const address = server.address()
+ if (address === null || typeof address === 'string') throw new Error('collector has no port')
+ process.env.DSH_APP_VERSION = 'synthetic-release'
+ process.env.DSH_PRODUCT_TELEMETRY_TEST_ENDPOINT = `http://127.0.0.1:${address.port}/v1/logs`
+ const ctx = await bootProductionProfile({ binName: 'product-telemetry-test', profile: 'headless', overlayPaths: [configPath] })
+ try {
+ const telemetry = ctx.get('productTelemetry')
+ if (telemetry === undefined) throw new Error('product telemetry did not activate')
+ telemetry.emit({ eventName: 'telemetry.synthetic', timestamp: 1_800_000_000_000, body: 'Synthetic test', attributes: { synthetic: true } })
+ } finally {
+ await ctx.fiber.dispose()
+ }
+ await writeFile('captures.json', JSON.stringify(captures))
+} finally {
+ const closed = once(server, 'close')
+ server.close()
+ server.closeAllConnections()
+ await closed
+}
diff --git a/packages/host/product-telemetry-otel/tests/fixtures/telemetry.patch.yml b/packages/host/product-telemetry-otel/tests/fixtures/telemetry.patch.yml
new file mode 100644
index 0000000000..d9104a0bfb
--- /dev/null
+++ b/packages/host/product-telemetry-otel/tests/fixtures/telemetry.patch.yml
@@ -0,0 +1,15 @@
+- id: session-telemetry-otel
+ disabled: true
+- id: headless-startup
+ disabled: true
+- id: headless-runner
+ disabled: true
+- insert:
+ - id: product-telemetry-otel
+ name: '@deepseek-ai/dsh-host-product-telemetry-otel'
+ config:
+ endpoint: !!js process.env.DSH_PRODUCT_TELEMETRY_TEST_ENDPOINT
+ serviceName: dsh-telemetry-test
+ serviceVersion: !!js process.env.DSH_APP_VERSION
+ compression: gzip
+ scheduledDelayMillis: 60000
diff --git a/packages/host/product-telemetry-otel/tests/loader-composition.e2e.ts b/packages/host/product-telemetry-otel/tests/loader-composition.e2e.ts
new file mode 100644
index 0000000000..13acb46e00
--- /dev/null
+++ b/packages/host/product-telemetry-otel/tests/loader-composition.e2e.ts
@@ -0,0 +1,23 @@
+import { readFile } from 'node:fs/promises'
+import { resolve } from 'node:path'
+import { expect, it } from 'vitest'
+import { runLoaderSmoke, LOADER_SMOKE_TEST_TIMEOUT_MS } from '@deepseek-ai/dsh-loader-smoke'
+
+it('exports the explicitly submitted event through the headless Loader composition', async () => {
+ let captures: unknown
+ const driver = resolve(import.meta.dirname, 'fixtures/driver.ts')
+ await runLoaderSmoke({
+ label: 'product telemetry composition',
+ tempDirPrefix: 'product-telemetry-',
+ binScript: driver,
+ libBinScript: driver,
+ configPath: resolve(import.meta.dirname, 'fixtures/telemetry.patch.yml'),
+ tsconfigPath: resolve(import.meta.dirname, '../../../../tsconfig.base.json'),
+ inspect: async (cwd) => { captures = JSON.parse(await readFile(resolve(cwd, 'captures.json'), 'utf8')) },
+ })
+ expect(captures).toMatchObject([{
+ channel: 'dsh_otel_report', compression: 'gzip',
+ body: { resourceLogs: [{ scopeLogs: [{ logRecords: [{ eventName: 'telemetry.synthetic', body: { stringValue: 'Synthetic test' } }] }] }] },
+ }])
+ expect(JSON.stringify(captures).match(/"eventName"/g)).toHaveLength(1)
+}, LOADER_SMOKE_TEST_TIMEOUT_MS)
diff --git a/packages/host/product-telemetry-otel/tests/telemetry.spec.ts b/packages/host/product-telemetry-otel/tests/telemetry.spec.ts
new file mode 100644
index 0000000000..22f7df5c30
--- /dev/null
+++ b/packages/host/product-telemetry-otel/tests/telemetry.spec.ts
@@ -0,0 +1,203 @@
+import { createServer, type IncomingHttpHeaders } from 'node:http'
+import { once } from 'node:events'
+import { gunzipSync } from 'node:zlib'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { Context } from '@deepseek-ai/cordis'
+import { LoggerProvider } from '@opentelemetry/sdk-logs'
+import { SeverityNumber } from '@opentelemetry/api-logs'
+import ProductTelemetry, { Config } from '../src/index.ts'
+
+interface Capture {
+ headers: IncomingHttpHeaders
+ body: { resourceLogs: { resource: unknown; scopeLogs: { logRecords: Record[] }[] }[] }
+}
+const cleanup: (() => Promise)[] = []
+afterEach(async () => {
+ try {
+ for (const dispose of cleanup.splice(0).reverse()) await dispose()
+ } finally {
+ vi.unstubAllEnvs()
+ vi.restoreAllMocks()
+ vi.useRealTimers()
+ }
+})
+
+beforeEach(() => {
+ vi.stubEnv('OTEL_EXPORTER_OTLP_COMPRESSION', undefined)
+ vi.stubEnv('OTEL_EXPORTER_OTLP_LOGS_COMPRESSION', undefined)
+})
+
+async function collector(statuses = [200]) {
+ const captures: Capture[] = []
+ const server = createServer((req, res) => {
+ const chunks: Buffer[] = []
+ req.on('data', chunk => chunks.push(chunk as Buffer))
+ req.on('end', () => {
+ const raw = Buffer.concat(chunks)
+ const bytes = req.headers['content-encoding'] === 'gzip' ? gunzipSync(raw) : raw
+ captures.push({ headers: req.headers, body: JSON.parse(bytes.toString()) as Capture['body'] })
+ res.writeHead(statuses.shift() ?? 200, { 'content-type': 'application/json' }).end('{}')
+ })
+ })
+ cleanup.push(async () => {
+ const closed = once(server, 'close')
+ server.close()
+ server.closeAllConnections()
+ await closed
+ })
+ server.listen(0, '127.0.0.1')
+ await once(server, 'listening')
+ const address = server.address()
+ if (address === null || typeof address === 'string') throw new Error('collector has no port')
+ return { captures, endpoint: `http://127.0.0.1:${address.port}/v1/logs` }
+}
+
+function config(endpoint: string, overrides: Partial = {}): Config {
+ return Config({ endpoint, serviceName: 'synthetic-test', serviceVersion: '1', scheduledDelayMillis: 60_000, ...overrides })
+}
+
+function context() {
+ const ctx = new Context()
+ cleanup.push(() => ctx.fiber.dispose())
+ return ctx
+}
+
+const event = { eventName: 'telemetry.synthetic', body: 'Synthetic test', timestamp: 1_800_000_000_000 }
+
+describe('explicit product telemetry', () => {
+ it.each(['gzip', 'none', undefined] as const)('drains typed events with %s compression and removes the service', async (compression) => {
+ const target = await collector()
+ const ctx = context()
+ const fiber = await ctx.plugin(ProductTelemetry, config(target.endpoint, compression === undefined ? {} : { compression }))
+ const service = ctx.productTelemetry
+ expect(target.captures).toEqual([])
+ service.emit({ ...event, attributes: { text: 'test', count: 2, duration: 1.5, synthetic: true, model: { provider: 'test', count: 1, enabled: false } } })
+ service.emit({ ...event, severityNumber: SeverityNumber.ERROR })
+ await fiber.dispose()
+ expect(ctx.get('productTelemetry')).toBeUndefined()
+ service.emit(event)
+ expect(target.captures).toHaveLength(1)
+ const [capture] = target.captures
+ expect(capture?.headers['x-channel']).toBe('dsh_otel_report')
+ expect(capture?.headers['content-encoding']).toBe(compression === 'gzip' ? 'gzip' : undefined)
+ const logs = capture?.body.resourceLogs.flatMap(r => r.scopeLogs.flatMap(s => s.logRecords))
+ expect(logs).toHaveLength(2)
+ expect(logs?.[0]).toMatchObject({
+ eventName: event.eventName, body: { stringValue: event.body }, severityNumber: 9,
+ timeUnixNano: '1800000000000000000',
+ })
+ expect(logs?.[0]?.['attributes']).toEqual(expect.arrayContaining([
+ { key: 'text', value: { stringValue: 'test' } },
+ { key: 'count', value: { intValue: 2 } },
+ { key: 'duration', value: { doubleValue: 1.5 } },
+ { key: 'synthetic', value: { boolValue: true } },
+ { key: 'model', value: { kvlistValue: { values: [{ key: 'provider', value: { stringValue: 'test' } }, { key: 'count', value: { intValue: 1 } }, { key: 'enabled', value: { boolValue: false } }] } } },
+ ]))
+ expect(Number(logs?.[0]?.['observedTimeUnixNano'])).toBeGreaterThan(0)
+ expect(logs?.[1]?.['severityNumber']).toBe(17)
+ expect(JSON.stringify(capture)).not.toContain('user.id')
+ })
+
+ it('isolates collector headers from ambient OpenTelemetry credentials', async () => {
+ vi.stubEnv('OTEL_EXPORTER_OTLP_HEADERS', 'Authorization=Bearer%20synthetic-secret,x-user-id=synthetic-user')
+ vi.stubEnv('OTEL_EXPORTER_OTLP_LOGS_HEADERS', 'x-log-token=synthetic-token,x-channel=other-collector')
+ const target = await collector()
+ const ctx = context()
+ const fiber = await ctx.plugin(ProductTelemetry, config(target.endpoint))
+ ctx.productTelemetry.emit(event)
+ await fiber.dispose()
+ expect(target.captures).toHaveLength(1)
+ expect(target.captures[0]?.headers).toMatchObject({ 'x-channel': 'dsh_otel_report' })
+ expect(target.captures[0]?.headers).not.toHaveProperty('authorization')
+ expect(target.captures[0]?.headers).not.toHaveProperty('x-user-id')
+ expect(target.captures[0]?.headers).not.toHaveProperty('x-log-token')
+ expect(process.env['OTEL_EXPORTER_OTLP_HEADERS']).toContain('synthetic-secret')
+ })
+
+ it('does not export on mount or empty shutdown', async () => {
+ const target = await collector()
+ const fiber = await context().plugin(ProductTelemetry, config(target.endpoint))
+ await fiber.dispose()
+ expect(target.captures).toEqual([])
+ })
+
+ it('exports at the batch threshold and retries a transient rejection', async () => {
+ const target = await collector([503, 200])
+ const ctx = context()
+ await ctx.plugin(ProductTelemetry, config(target.endpoint, { maxExportBatchSize: 1 }))
+ ctx.productTelemetry.emit(event)
+ await vi.waitFor(() => { expect(target.captures).toHaveLength(2) }, { timeout: 10_000 })
+ expect(target.captures[0]?.body).toEqual(target.captures[1]?.body)
+ })
+
+ it('exports a partial batch on its configured interval', async () => {
+ const target = await collector()
+ const ctx = context()
+ await ctx.plugin(ProductTelemetry, config(target.endpoint, { scheduledDelayMillis: 10 }))
+ ctx.productTelemetry.emit(event)
+ await vi.waitFor(() => { expect(target.captures).toHaveLength(1) })
+ })
+
+ it('reports a permanent export rejection without failing the caller', async () => {
+ const target = await collector([400])
+ const ctx = context()
+ const warn = vi.spyOn(ctx.logger, 'warn')
+ const fiber = await ctx.plugin(ProductTelemetry, config(target.endpoint))
+ expect(() => { ctx.productTelemetry.emit(event) }).not.toThrow()
+ await fiber.dispose()
+ expect(target.captures).toHaveLength(1)
+ expect(warn).toHaveBeenCalledWith('Product telemetry export failed', expect.any(Error))
+ })
+
+ it.each([
+ { endpoint: 'broken' }, { endpoint: 'ftp://collector.test/logs' },
+ { channel: '' }, { channel: 'bad\nchannel' }, { channel: '中文' }, { timeoutMillis: 0 },
+ { maxExportBatchSize: 0 }, { maxExportBatchSize: 2, maxQueueSize: 1 },
+ { maxQueueSize: -1 }, { scheduledDelayMillis: 0 }, { exportTimeoutMillis: Infinity },
+ { shutdownTimeoutMillis: 2_147_483_648 },
+ ])('rejects invalid configuration %j before exposing the service', (invalid) => {
+ const ctx = context()
+ expect(() => new ProductTelemetry(ctx, config('http://collector.test/v1/logs', invalid))).toThrow()
+ expect(ctx.get('productTelemetry')).toBeUndefined()
+ })
+
+ it.each([
+ [{ endpoint: 'broken' }, 'endpoint must be a valid HTTP(S) URL'],
+ [{ channel: 'bad\nchannel' }, 'channel must be a valid HTTP header value'],
+ ] as const)('names invalid transport fields before registering the service', (invalid, message) => {
+ const ctx = context()
+ expect(() => new ProductTelemetry(ctx, config('http://collector.test/v1/logs', invalid)))
+ .toThrow(`product-telemetry-otel: ${message}`)
+ expect(ctx.get('productTelemetry')).toBeUndefined()
+ })
+
+ it.each([
+ ['OTEL_EXPORTER_OTLP_COMPRESSION', 'gzip'],
+ ['OTEL_EXPORTER_OTLP_LOGS_COMPRESSION', 'gzip'],
+ ])('honors %s when compression is omitted', async (name, value) => {
+ vi.stubEnv(name, value)
+ const target = await collector()
+ const ctx = context()
+ const fiber = await ctx.plugin(ProductTelemetry, config(target.endpoint))
+ ctx.productTelemetry.emit(event)
+ await fiber.dispose()
+ expect(target.captures[0]?.headers['content-encoding']).toBe('gzip')
+ })
+
+ it('bounds a stalled shutdown and observes its later settlement', async () => {
+ const target = await collector()
+ const ctx = context()
+ const warn = vi.spyOn(ctx.logger, 'warn')
+ const fiber = await ctx.plugin(ProductTelemetry, config(target.endpoint, { shutdownTimeoutMillis: 20 }))
+ const pending = Promise.withResolvers()
+ vi.spyOn(LoggerProvider.prototype, 'shutdown').mockReturnValue(pending.promise)
+ vi.useFakeTimers()
+ const disposal = fiber.dispose()
+ await vi.advanceTimersByTimeAsync(20)
+ await disposal
+ expect(warn).toHaveBeenCalledWith('Product telemetry shutdown deadline exceeded; pending events may be lost')
+ pending.resolve(undefined)
+ await pending.promise
+ await vi.advanceTimersByTimeAsync(0)
+ })
+})
diff --git a/packages/host/product-telemetry-otel/tsconfig.json b/packages/host/product-telemetry-otel/tsconfig.json
new file mode 100644
index 0000000000..f0063ae28d
--- /dev/null
+++ b/packages/host/product-telemetry-otel/tsconfig.json
@@ -0,0 +1,21 @@
+{
+ "extends": "../../../tsconfig.base.json",
+ "compilerOptions": {
+ "rootDir": "src",
+ "outDir": "lib/types"
+ },
+ "include": [
+ "src"
+ ],
+ "references": [
+ {
+ "path": "../../../vendor/cosmokit"
+ },
+ {
+ "path": "../../../vendor/cordis"
+ },
+ {
+ "path": "../../../vendor/schemastery"
+ }
+ ]
+}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4ffe4df02d..db1cd2d495 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -671,6 +671,9 @@ importers:
'@deepseek-ai/dsh-client-test-runtime':
specifier: workspace:^
version: link:../../packages/test-support/client-runtime
+ '@deepseek-ai/dsh-client-ui-deliverables':
+ specifier: workspace:^
+ version: link:../../packages/client/ui-deliverables
'@deepseek-ai/dsh-client-ui-dockkit':
specifier: workspace:^
version: link:../../packages/client/ui-dockkit
@@ -4053,6 +4056,9 @@ importers:
'@deepseek-ai/dsh-client-store':
specifier: workspace:^
version: link:../store
+ '@deepseek-ai/dsh-util-workspace-path':
+ specifier: workspace:^
+ version: link:../../util/workspace-path
'@shikijs/langs':
specifier: ^4.3.1
version: 4.3.1
@@ -8436,6 +8442,46 @@ importers:
specifier: workspace:^
version: link:../../typert/protocol
+ packages/host/product-telemetry-otel:
+ dependencies:
+ '@deepseek-ai/schemastery':
+ specifier: link:../../../vendor/schemastery
+ version: link:../../../vendor/schemastery
+ '@opentelemetry/api':
+ specifier: ^1.9.1
+ version: 1.9.1
+ '@opentelemetry/api-logs':
+ specifier: ^0.220.0
+ version: 0.220.0
+ '@opentelemetry/core':
+ specifier: 2.9.0
+ version: 2.9.0(@opentelemetry/api@1.9.1)
+ '@opentelemetry/otlp-exporter-base':
+ specifier: ^0.220.0
+ version: 0.220.0(@opentelemetry/api@1.9.1)
+ '@opentelemetry/otlp-transformer':
+ specifier: ^0.220.0
+ version: 0.220.0(@opentelemetry/api@1.9.1)
+ '@opentelemetry/resources':
+ specifier: ^2.9.0
+ version: 2.10.0(@opentelemetry/api@1.9.1)
+ '@opentelemetry/sdk-logs':
+ specifier: ^0.220.0
+ version: 0.220.0(@opentelemetry/api@1.9.1)
+ devDependencies:
+ '@deepseek-ai/cordis':
+ specifier: workspace:^
+ version: link:../../../vendor/cordis
+ '@deepseek-ai/cordis-plugin-loader':
+ specifier: workspace:^
+ version: link:../../../vendor/loader
+ '@deepseek-ai/dsh-app-boot':
+ specifier: workspace:^
+ version: link:../../boot/app-boot
+ '@deepseek-ai/dsh-loader-smoke':
+ specifier: workspace:^
+ version: link:../../test-support/loader-smoke
+
packages/host/webserver:
dependencies:
'@deepseek-ai/schemastery':
diff --git a/scripts/gen-cordis-catalog.ts b/scripts/gen-cordis-catalog.ts
index 454c58b734..91a4782497 100644
--- a/scripts/gen-cordis-catalog.ts
+++ b/scripts/gen-cordis-catalog.ts
@@ -56,6 +56,7 @@ export { REGION_BEGIN, REGION_END }
export const SERVICE_PAGE: Record = {
speechToText: 'voice-input.md',
speechController: 'voice-input.md',
+ productTelemetry: 'product-telemetry.md',
connection: 'web-server.md',
pluginManager: 'boot.md',
profileContext: 'boot.md',
@@ -266,6 +267,8 @@ export const EVENT_WALK_EXEMPTIONS: Record = {
* appear on more than one page.
*/
export const LINK_MAP: Readonly> = {
+ ProductTelemetryRecord: 'product-telemetry.md',
+ ProductTelemetryScalar: 'product-telemetry.md',
WorkspaceChangesSummary: 'deliverables.md',
WorkspaceFileDiff: 'deliverables.md',
Reload: 'boot.md',
diff --git a/scripts/gen-doc-graphs.ts b/scripts/gen-doc-graphs.ts
index e33aeaffcb..0890e45bd7 100644
--- a/scripts/gen-doc-graphs.ts
+++ b/scripts/gen-doc-graphs.ts
@@ -31,7 +31,7 @@ interface ServiceRole {
key: string
pkg: string
title: string
- mode: 'core' | 'seam' | 'bundle'
+ mode: 'core' | 'seam' | 'bundle' | 'service'
implementations?: string[]
consumers?: string[]
companions?: string[]
@@ -373,6 +373,14 @@ const SERVICE_ROLES: ServiceRole[] = [
consumers: ['llm-pi-ai'],
note: 'Flows are registered by the plugin that knows how to obtain one credential and keyed by the record they write; the seam owns the conversation and the one-attempt-per-key lifecycle, never the protocol.',
},
+ {
+ key: 'productTelemetry',
+ pkg: 'host-product-telemetry-otel',
+ title: 'Product usage event sender',
+ mode: 'service',
+ note: 'Exports explicitly submitted analytics events through OTLP/HTTP; mounting alone collects nothing.',
+ },
+
{
key: 'sessionTelemetry',
pkg: 'session-telemetry',
@@ -863,7 +871,7 @@ function renderCapabilitySeams(pkgs: Pkg[], services: readonly ServiceEntry[]):
const addEdge = (from: string, to: string): void => { edges.add(` ${from} --> ${to}`) }
const lines = generatedHeader('Capability Seams And Core Services')
lines.push(
- 'A service can be a core spine service, a swappable capability seam, or a bundle/composition point. The graph shows the package that owns the service declaration, known implementation packages, and packages that consume the service directly.',
+ 'A service can be a core spine service, a swappable capability seam, a bundle/composition point, or a standalone service. The graph shows the package that owns the service declaration, known implementation packages, and packages that consume the service directly.',
'',
'```mermaid',
'flowchart LR',
diff --git a/scripts/type-equiv.manifest.json b/scripts/type-equiv.manifest.json
index e36b61fbf7..e1bf5ad4e9 100644
--- a/scripts/type-equiv.manifest.json
+++ b/scripts/type-equiv.manifest.json
@@ -2256,6 +2256,16 @@
"doc": "docs/subsystems/deliverables.md",
"symbol": "WorkspaceChanges",
"source": "packages/deliverables/workspace-changes/src/types.ts"
+ },
+ {
+ "doc": "docs/subsystems/product-telemetry.md",
+ "symbol": "ProductTelemetryScalar",
+ "source": "packages/host/product-telemetry-otel/src/index.ts"
+ },
+ {
+ "doc": "docs/subsystems/product-telemetry.md",
+ "symbol": "ProductTelemetryRecord",
+ "source": "packages/host/product-telemetry-otel/src/index.ts"
}
]
}
diff --git a/scripts/verify-package-readme-model-experience.ts b/scripts/verify-package-readme-model-experience.ts
index 6a4ee18a25..c059754f41 100644
--- a/scripts/verify-package-readme-model-experience.ts
+++ b/scripts/verify-package-readme-model-experience.ts
@@ -49,6 +49,7 @@ const SENTENCE_MODEL_EXPERIENCE: Readonly> = {
'packages/experimental/speech-to-text-sensevoice': { kind: 'none', reason: 'Local recognition returns transient text without modifying model context.' },
'packages/experimental/client-ui-voice-input': { kind: 'none', reason: 'Inserts reviewable text into the unsent draft without submitting to the Agent.' },
'packages/experimental/voice-input-bundle': { kind: 'none', reason: 'Composes dictation and preparation plugins without adding any model-facing contribution.' },
+ 'packages/host/product-telemetry-otel': { kind: 'none', reason: 'The plugin exports explicit analytics records without contributing model context.' },
'packages/api/terminal-controller': { kind: 'none', reason: 'User-owned terminal processes and screen streams never enter model requests or Session events.' },
'packages/client/ui-sidebar-terminal': { kind: 'none', reason: 'The browser renders user terminal screens without exposing them to the model.' },
'packages/ssh/ssh': { kind: 'none', reason: 'The connection owner transports private provider operations; consumers own all model-facing content.' },
diff --git a/tsconfig.base.json b/tsconfig.base.json
index f386f12aba..d39dff388c 100644
--- a/tsconfig.base.json
+++ b/tsconfig.base.json
@@ -187,6 +187,7 @@
"@deepseek-ai/dsh-host-directory-picker-native/*": ["./packages/host/directory-picker-native/src/*"],
"@deepseek-ai/dsh-host-directory-picker-auto": ["./packages/host/directory-picker-auto/src"],
"@deepseek-ai/dsh-host-directory-picker-auto/*": ["./packages/host/directory-picker-auto/src/*"],
+ "@deepseek-ai/dsh-host-product-telemetry-otel": ["./packages/host/product-telemetry-otel/src"],
"@deepseek-ai/dsh-host-open-in-app": ["./packages/host/open-in-app/src"],
"@deepseek-ai/dsh-host-open-in-app/shared": ["./packages/host/open-in-app/src/shared.ts"],
"@deepseek-ai/dsh-host-webserver": ["./packages/host/webserver/src"],
diff --git a/tsconfig.host.json b/tsconfig.host.json
index 50c576de65..de8982ce97 100644
--- a/tsconfig.host.json
+++ b/tsconfig.host.json
@@ -177,6 +177,7 @@
{ "path": "./packages/experimental/api-speech-to-text" },
{ "path": "./packages/experimental/voice-input-bundle" },
+ { "path": "./packages/host/product-telemetry-otel" },
{ "path": "./packages/client/connection/tsconfig.host.json" },
{ "path": "./packages/skill/skill-office" },
{ "path": "./packages/skill/tool-workspace-dependencies" },