fix(telemetry): record unrecognized callers as unknown instead of human

Author: hopelynd

docs/agents/telemetry-change.md

@@ -95,17 +95,17 @@ source-config 只用于百炼 / DashScope API 侧消费，不发送到通用网
 - `command`、`timestamp`、`durationMs`、`success`
 - `cliVersion`、`nodeVersion`、`os`
 - `authMethod`
-- `callerType`（必填：`agent` 或 `human`）；`callerType=agent` 时可选 `callerName`、`skillName`、`skillVersion`
+- `callerType`（必填：`agent` 或 `unknown`）；`callerType=agent` 时可选 `callerName`、`skillName`、`skillVersion`
 - 失败时的 `errorMessage`、`exitCode`、`httpStatus`、`requestId`
 - 安全 allowlist 过滤后的 `params`
 
-调用方归因只认本次进程的 `BAILIAN_CALLER_*`（由 `readCaller` 归一化后写入事件），口径对齐 Ark CLI：
+调用方归因只认本次进程的 `BAILIAN_CALLER_*`（由 `readCaller` 归一化后写入事件）：
 
 - `BAILIAN_CALLER_TYPE` 为 `agent` / `ai_agent`（大小写不敏感）→ `callerType=agent`
-- 未设置、空白、显式 `human` 或其他值 → `callerType=human`；人类终端不要手动设这些变量
+- 未设置、空白或其他值 → `callerType=unknown`；不要把该字段当成人工
 - `callerName` / `skillName` / `skillVersion` 仅在 `agent` 时发送；`kscli` 通常没有 skill 字段
 
-新 CLI 每条进入 middleware 的命令事件都有 `callerType`。旧 CLI 没有该字段。看板只统计带 `callerType` 的事件，不能把字段缺失混进分母。新 CLI + 旧 skill / Agent 漏设变量时，会落进 `human`（与 Ark 相同，靠 skill 强制贴标签收敛）。`BAILIAN_CALLER_*` 是调用方声明，不是 `Identity`，不得用来猜 `bl` / `kscli`。
+新 CLI 每条进入 middleware 的命令事件都有 `callerType`。旧 CLI 没有该字段。看板只统计带 `callerType` 的事件，不能把字段缺失混进分母。`unknown` 只表示未识别为 agent，不是人工。新 CLI + 旧 skill / Agent 漏设变量时，会落进 `unknown`。`BAILIAN_CALLER_*` 是调用方声明，不是 `Identity`，不得用来猜 `bl` / `kscli`。
 
 参数默认不上传，只有 `packages/core/src/telemetry/tracker.ts` 的 `PARAM_ALLOWLIST` 中字段会进入事件。不得加入 prompt、凭证、文件路径、URL、账号/租户/工作空间 ID 或其他用户内容。
 
@@ -158,7 +158,7 @@ AEM 映射：
 
 - [ ] 更新 `TrackingEvent`、`createTrackingEvent()` 与 `buildRemoteAemOptions()` 的字段映射
 - [ ] 本地 JSONL 与远端 AEM 必须基于同一结构化事件，不能维护两套字段口径
-- [ ] 调用方字段经 `readCaller` → `TrackingDeps.caller` → 事件；未设置默认 `human`，仅显式 Agent 声明为 `agent`
+- [ ] 调用方字段经 `readCaller` → `TrackingDeps.caller` → 事件；仅显式 `agent` / `ai_agent` 为 `agent`，其余为 `unknown`
 - [ ] 成功与失败均覆盖；遥测异常必须静默且不改变业务退出码
 - [ ] runtime 本地语义错误应记录 `exitCode`；新增字段默认随 AEM `ext` 上报，无需占用新的 `c1`—`c5`
 - [ ] 检查 `DO_NOT_TRACK=1` 与 `telemetry: false` 两个关闭入口
@@ -177,7 +177,7 @@ vp test packages/core/tests packages/runtime/tests/telemetry-stage.test.ts packa
 
 - ✗ 只看 AEM 命令事件，误以为它能替代网关侧请求渠道统计
 - ✗ 把 `authMethod` 当成实际凭证来源；它只是命令声明的鉴权域
-- ✗ 把旧 CLI「没有 `callerType`」和「`callerType=human`」混进同一分母宣称人工占比
+- ✗ 把旧 CLI「没有 `callerType`」或「`callerType=unknown`」当成人工占比
 - ✗ 用 `BAILIAN_CALLER_*` 猜测产品身份，或根据 TTY / 安装目录反推调用方
 - ✗ 新增 bypass `fetch` 后漏掉应由网关消费的 source-config，或把它发给 OSS / npm / 第三方下载地址
 - ✗ 只改 `bl` 入口，导致 `kscli` 的产品名或版本标签错误

packages/core/src/telemetry/caller.ts

@@ -1,7 +1,7 @@
-/** Parse BAILIAN_CALLER_* from the process env. Defaults to human. */
+/** Parse BAILIAN_CALLER_*. Only an explicit agent is `agent`; everything else is `unknown`. */
 
 export type CallerAttribution =
-  | { callerType: "human" }
+  | { callerType: "unknown" }
   | {
       callerType: "agent";
       callerName: string;
@@ -36,7 +36,7 @@ function normalizeCallerName(raw: string | undefined): string {
 export function readCaller(env: NodeJS.ProcessEnv): CallerAttribution {
   const callerType = readTrimmed(env, CALLER_TYPE_ENV)?.toLowerCase();
   if (callerType !== "agent" && callerType !== "ai_agent") {
-    return { callerType: "human" };
+    return { callerType: "unknown" };
   }
 
   const skillNameRaw = readTrimmed(env, SKILL_NAME_ENV)?.toLowerCase();

packages/core/src/telemetry/event.ts

@@ -15,7 +15,7 @@ export interface TrackingEvent {
   os: string;
   authMethod?: AuthRequirement;
   params?: Record<string, unknown>;
-  /** Always present on new CLI events: `agent` or `human`. */
+  /** Always present on new CLI events: `agent` or `unknown`. */
   callerType: CallerAttribution["callerType"];
   callerName?: string;
   skillName?: string;

packages/core/tests/telemetry-caller.test.ts

@@ -8,8 +8,8 @@ test.each([
   { label: "illegal false", env: { BAILIAN_CALLER_TYPE: "false" } },
   { label: "illegal ai-agent", env: { BAILIAN_CALLER_TYPE: "ai-agent" } },
   { label: "illegal zero", env: { BAILIAN_CALLER_TYPE: "0" } },
-])("maps $label to human without agent fields", ({ env }) => {
-  expect(readCaller(env)).toEqual({ callerType: "human" });
+])("maps $label to unknown without agent fields", ({ env }) => {
+  expect(readCaller(env)).toEqual({ callerType: "unknown" });
 });
 
 test.each([
@@ -130,13 +130,13 @@ test("lowercases skillName before validation", () => {
   });
 });
 
-test("ignores agent detail fields when callerType is human", () => {
+test("ignores agent detail fields when callerType is not agent", () => {
   expect(
     readCaller({
       BAILIAN_CALLER_TYPE: "human",
       BAILIAN_CALLER_NAME: "cursor",
       BAILIAN_SKILL_NAME: "bailian-cli",
       BAILIAN_SKILL_VERSION: "2.5.0",
     }),
-  ).toEqual({ callerType: "human" });
+  ).toEqual({ callerType: "unknown" });
 });

packages/core/tests/telemetry-tracker.test.ts

@@ -21,7 +21,7 @@ const identity: Identity = {
   npmPackage: "bailian-cli",
 };
 
-const humanCaller: CallerAttribution = { callerType: "human" };
+const unknownCaller: CallerAttribution = { callerType: "unknown" };
 const agentCaller: CallerAttribution = {
   callerType: "agent",
   callerName: "cursor",
@@ -40,7 +40,7 @@ test("records BailianError exitCode in local events and AEM ext", async () => {
         identity,
         settings: { telemetry: true } as Settings,
         authMethod: "apiKey",
-        caller: humanCaller,
+        caller: unknownCaller,
       },
       ["knowledge", "doc", "delete"],
       {},
@@ -57,13 +57,13 @@ test("records BailianError exitCode in local events and AEM ext", async () => {
     success: false,
     exitCode: 7,
     errorMessage: "该操作会永久删除文档。",
-    callerType: "human",
+    callerType: "unknown",
   });
   expect(event.callerName).toBeUndefined();
   expect(event.skillName).toBeUndefined();
   expect(event.skillVersion).toBeUndefined();
   expect(buildRemoteAemOptions(event)).toMatchObject({
-    ext: expect.objectContaining({ exitCode: 7, callerType: "human" }),
+    ext: expect.objectContaining({ exitCode: 7, callerType: "unknown" }),
   });
 });
 
@@ -85,7 +85,7 @@ test.each([
         identity,
         settings: { telemetry: true } as Settings,
         authMethod: "apiKey",
-        caller: humanCaller,
+        caller: unknownCaller,
       },
       ["managed-agent", "webhook", "events"],
       { page, pageSize: 20 },

packages/runtime/tests/telemetry-stage.test.ts

@@ -71,7 +71,7 @@ test("wires process.env through readCaller into trackCommandExecution", async ()
   expect(next).toHaveBeenCalledOnce();
 });
 
-test("defaults to human when caller env is unset", async () => {
+test("defaults to unknown when caller env is unset", async () => {
   vi.stubEnv("BAILIAN_CALLER_TYPE", undefined);
   vi.stubEnv("BAILIAN_CALLER_NAME", undefined);
   vi.stubEnv("BAILIAN_SKILL_NAME", undefined);
@@ -83,5 +83,5 @@ test("defaults to human when caller env is unset", async () => {
   const deps = trackerMocks.trackCommandExecution.mock.calls[0]![0] as {
     caller: CallerAttribution;
   };
-  expect(deps.caller).toEqual({ callerType: "human" });
+  expect(deps.caller).toEqual({ callerType: "unknown" });
 });

skills/bailian-protocol/SKILL.md

@@ -74,7 +74,7 @@ After approval, treat Bailian as selected for the current task. Do not ask again
 
 ## Call attribution (mandatory for every Agent `bl` command)
 
-Examples in this protocol, `assets/`, and business skills show bare `bl …`. When an Agent **runs** a command, wrap that single invocation with the prefix below (declared once here). Humans must not set these variables; unset defaults to human.
+Examples in this protocol, `assets/`, and business skills show bare `bl …`. When an Agent **runs** a command, wrap that single invocation with the prefix below (declared once here). Humans must not set these variables. Anything other than an explicit agent is recorded as `unknown`.
 
 ```bash
 BAILIAN_CALLER_TYPE=agent \