[dataloader-core] Runtime OpenTelemetry API import is undeclared

[kang-heewon]

🚨 [P2] [dataloader-core] Runtime OpenTelemetry API import is undeclared

Category: Packaging/Public API Effort: S Confidence: High
Evidence: 발견 1건 · 영향 파일 2개 · hotspot=false · bugfix churn=0회

🐛 상세 내용

• 주요 위치: packages/dataloader-core/src/libs/BatchLoader.ts:3
• 추가 발생 위치:
  • packages/dataloader-core/package.json:24-29 — dependencies omit @opentelemetry/api
  • packages/dataloader-core/README.md — documents OpenTelemetry integration and install as pnpm add @croco/dataloader-core
• 문제 코드:

import { recordError } from '@croco/telemetry-api';
import { context, trace } from '@opentelemetry/api';

@croco/dataloader-core directly imports OpenTelemetry API objects at runtime, but its published dependency list only includes Croco packages such as @croco/telemetry-api; it does not declare @opentelemetry/api directly.

• 왜 문제인가?
  Under pnpm/published-package isolation, a package must declare the packages it imports directly. A clean consumer that installs only @croco/dataloader-core can fail to load BatchLoader unless another incidental dependency hoists @opentelemetry/api. This is a packaging contract issue, distinct from existing dataloader runtime behavior issues.

🛠 제안 해결 방안

1. Add @opentelemetry/api to packages/dataloader-core/package.json dependencies or peerDependencies + devDependencies according to the intended consumer contract.
2. Align the version range with the rest of the monorepo telemetry packages.
3. Add a pack/install smoke test that imports @croco/dataloader-core from a clean fixture.

✅ Acceptance Criteria

• @croco/dataloader-core declares every direct runtime dependency it imports, including @opentelemetry/api.
• A clean consumer can install and import BatchLoader without relying on transitive/hoisted dependencies.
• CI has a dependency-boundary or pack/import smoke check for this package.

🛡 Regression Prevention

Add a package dependency audit that compares non-relative runtime imports in packages/*/src with each package's dependencies/peerDependencies.

🔗 Related

• Files: packages/dataloader-core/src/libs/BatchLoader.ts, packages/dataloader-core/package.json, packages/dataloader-core/README.md
• Related issues: none found by duplicate search

---

Generated by issue-find v2 (severity=P2, evidence_score=high)