Function reportAttemptTelemetry

browse/src/security.ts:481–504

* Fire-and-forget subprocess invocation of gstack-telemetry-log with the * attack_attempt event type. The binary handles tier gating internally * (community → upload, anonymous → local only, off → no-op), so we don't * need to re-check here. * * Never throws. Never blocks. If the binary isn't f

(record: AttemptRecord)

 * local attempts.jsonl write from logAttempt() still gives us the audit trail.
 */
function reportAttemptTelemetry(record: AttemptRecord): void {
  const bin = findTelemetryBinary();
  if (!bin) return;
  try {
    const result = buildTelemetrySpawnCommand(bin, [
      '--event-type', 'attack_attempt',
      '--url-domain', record.urlDomain || '',
      '--payload-hash', record.payloadHash,
      '--confidence', String(record.confidence),
      '--layer', record.layer,
      '--verdict', record.verdict,
    ]);
    if (!result) return;
    const child = spawn(result.cmd, result.cmdArgs, {
      stdio: 'ignore',
      detached: true,
    });
    // unref so this subprocess doesn't hold the event loop open
    child.unref();
    child.on('error', () => { /* swallow — telemetry must never break sidebar */ });
  } catch {
    // Spawn failure is non-fatal.
  }
}

/**
 * Append an attempt to the local log AND fire telemetry via