@apifuse/provider-sdk 2.2.0-beta.7 → 2.2.0-beta.70

package/dist/testing/run.js

@@ -1,15 +1,33 @@
 import { describe, expect, it } from "bun:test";
+import { ProviderError } from "../errors.js";
 import { createProviderCache } from "../runtime/cache.js";
-import { createTestProviderChoiceContext } from "../runtime/choice.js";
+import { createTestHandleContext } from "../runtime/handle.js";
+/**
+ * Stable connection scope for the local test harness so bound handles (drafts,
+ * default cursors) can be exercised exactly as in a connected production call.
+ */
+const STANDARD_TEST_CONNECTION_ID = "standard-test-connection";
 import { createMemoryProviderRuntimeState } from "../runtime/state.js";
+import { assertCallerHeadersSupported } from "../runtime/stealth-owned-headers.js";
+import { createUnsupportedOcrClient } from "../runtime/ocr.js";
 import { createUnsupportedSttClient } from "../runtime/stt.js";
+import { createNativeEgressAuthorization, NativeNetworkError, snapshotNativeConnectInput, snapshotNativeGrantInput, } from "../runtime/native-network.js";
 import { safeParseSchemaSync } from "../schema.js";
+import { requestPathForFixture } from "../fixture-sanitization.js";
+import { findStreamCaptureGroup, replayStreamEvidence } from "../stream-evidence.js";
 // Mirrors CONNECTOR_ID_REGEX in ../define.ts, which defineProvider() enforces.
 // A single lowercase segment (no hyphen) is a valid id, so the trailing group
 // is optional (`*`), matching providers like `kakaomap`, `kstartup`, `triple`.
 const CONNECTOR_ID_REGEX = /^[a-z][a-z0-9]*(-[a-z][a-z0-9]*)*$/;
-const VALID_AUTH_MODES = ["none", "platform-managed", "credentials", "oauth2"];
+const VALID_AUTH_MODES = [
+    "none",
+    "platform-managed",
+    "credentials",
+    "oauth2",
+    "oauth2_proxied",
+];
 const UPDATE_SNAPSHOT_ARGS = new Set(["-u", "--update-snapshots"]);
+const snapshotCaptureStates = new WeakMap();
 function isFixtureEnvelope(value) {
     return (value !== null &&
         typeof value === "object" &&
@@ -74,10 +92,365 @@ function jsonResponse(data) {
         bytes: async () => bodyBytes.slice(0),
     };
 }
+function headersToRecord(headers) {
+    return Object.fromEntries(headers.entries());
+}
+async function normalizeUpstreamResponse(response) {
+    if (response instanceof Response) {
+        const bytes = new Uint8Array(await response.arrayBuffer());
+        const text = new TextDecoder().decode(bytes);
+        const headers = headersToRecord(response.headers);
+        let data = text;
+        if (response.headers.get("content-type")?.includes("application/json")) {
+            data = text.length > 0 ? JSON.parse(text) : null;
+        }
+        return { status: response.status, headers, data, text, bytes };
+    }
+    const headers = { ...(response.headers ?? {}) };
+    const body = response.body ?? null;
+    let bytes;
+    let text;
+    let data;
+    if (body instanceof Uint8Array) {
+        bytes = body.slice(0);
+        text = new TextDecoder().decode(bytes);
+        data = text;
+    }
+    else if (body instanceof ArrayBuffer) {
+        bytes = new Uint8Array(body.slice(0));
+        text = new TextDecoder().decode(bytes);
+        data = text;
+    }
+    else if (typeof body === "string") {
+        text = body;
+        bytes = new TextEncoder().encode(text);
+        data = body;
+    }
+    else {
+        text = JSON.stringify(body);
+        bytes = new TextEncoder().encode(text);
+        data = body;
+        if (!Object.keys(headers).some((name) => name.toLowerCase() === "content-type")) {
+            headers["content-type"] = "application/json";
+        }
+    }
+    return { status: response.status ?? 200, headers, data, text, bytes };
+}
+function toHttpResponse(response) {
+    return {
+        status: response.status,
+        ok: response.status >= 200 && response.status < 300,
+        headers: response.headers,
+        data: response.data,
+        json: async () => JSON.parse(response.text),
+        text: async () => response.text,
+        arrayBuffer: async () => response.bytes.slice(0).buffer,
+        bytes: async () => response.bytes.slice(0),
+    };
+}
+const emptyCookieJar = {
+    get: () => undefined,
+    getAll: () => ({}),
+    toString: () => "",
+};
+function emptyCookieStore() {
+    return {
+        version: 1,
+        jar: { cookies: [] },
+    };
+}
+function toStealthResponse(response, url) {
+    return {
+        status: response.status,
+        ok: response.status >= 200 && response.status < 300,
+        url,
+        redirected: false,
+        headers: response.headers,
+        rawHeaders: Object.entries(response.headers),
+        body: response.text,
+        cookies: emptyCookieJar,
+        json: async () => JSON.parse(response.text),
+        arrayBuffer: async () => response.bytes.slice(0).buffer,
+        bytes: async () => response.bytes.slice(0),
+    };
+}
+function streamFromBytes(bytes) {
+    return new ReadableStream({
+        start(controller) {
+            controller.enqueue(bytes.slice(0));
+            controller.close();
+        },
+    });
+}
+async function* singleBytes(bytes) {
+    yield bytes.slice(0);
+}
+async function* singleText(textValue) {
+    yield textValue;
+}
+function createUpstreamContext(provider, operationName, upstreamStub) {
+    const credential = {
+        mode: "none",
+        get: () => undefined,
+        getAll: () => ({}),
+        getAccessToken: () => undefined,
+        getScopes: () => [],
+    };
+    const request = { headers: {}, connectionId: STANDARD_TEST_CONNECTION_ID };
+    const state = createMemoryProviderRuntimeState();
+    const nativeEgress = provider.native
+        ? createNativeEgressAuthorization({ egress: provider.native.network })
+        : undefined;
+    const requireNativeEgress = () => {
+        if (!nativeEgress)
+            throw new NativeNetworkError("Native egress authorization is unavailable", "native_egress_policy_invalid");
+        return nativeEgress;
+    };
+    const dispatch = async (call) => {
+        const canned = await upstreamStub({ operationName, ...call });
+        if (canned === undefined) {
+            throw new Error(`Unmatched upstream call for operation "${operationName}": ${call.transport}.${call.method}${call.url ? ` ${call.url}` : ""}. Add a canned response to upstreamStub; live network passthrough is disabled.`);
+        }
+        return normalizeUpstreamResponse(canned);
+    };
+    const httpCall = async (method, url, body, options) => toHttpResponse(await dispatch({ transport: "http", method, url, body, options }));
+    // The production transport rejects owned headers (User-Agent, Sec-Fetch-*,
+    // sec-ch-ua*, ...) before any byte is sent; the fake applies the same
+    // function, so a provider test fails exactly where production would.
+    const stealthCall = async (url, options) => {
+        assertCallerHeadersSupported(options?.headers ?? {});
+        return toStealthResponse(await dispatch({
+            transport: "stealth",
+            method: options?.method?.toUpperCase() ?? "GET",
+            url,
+            body: options?.body,
+            options,
+        }), url);
+    };
+    const createBrowserPage = () => {
+        let currentUrl = "about:blank";
+        let currentResponse;
+        const browserAction = async (method, body) => {
+            currentResponse = await dispatch({
+                transport: "browser",
+                method,
+                url: currentUrl,
+                body,
+            });
+            return currentResponse;
+        };
+        const page = {
+            id: `standard-test-${operationName}`,
+            url: async () => currentUrl,
+            title: async () => currentResponse?.text.match(/<title[^>]*>([^<]*)<\/title>/i)?.[1] ?? "",
+            userAgent: async () => String((await browserAction("userAgent")).data),
+            content: async () => currentResponse?.text ?? "",
+            evaluate: async (fn) => (await browserAction("evaluate", typeof fn === "string" ? fn : String(fn))).data,
+            locator: (selector) => ({
+                click: async () => {
+                    await browserAction("locator.click", { selector });
+                },
+                fill: async (textValue) => {
+                    await browserAction("locator.fill", { selector, text: textValue });
+                },
+                textContent: async () => {
+                    const value = (await browserAction("locator.textContent", { selector })).data;
+                    return value === null || value === undefined ? null : String(value);
+                },
+                waitFor: async (options) => {
+                    await browserAction("locator.waitFor", { selector, options });
+                },
+            }),
+            close: async () => { },
+            cookies: async () => (await browserAction("cookies")).data,
+            fill: async (selector, textValue) => {
+                await browserAction("fill", { selector, text: textValue });
+            },
+            goto: async (url) => {
+                currentUrl = url;
+                await browserAction("goto");
+            },
+            screenshot: async (options) => Buffer.from((await browserAction("screenshot", options)).bytes),
+            click: async (selector) => {
+                await browserAction("click", { selector });
+            },
+            type: async (selector, textValue) => {
+                await browserAction("type", { selector, text: textValue });
+            },
+            waitForSelector: async (selector, options) => {
+                await browserAction("waitForSelector", { selector, options });
+            },
+            frames: async () => [page],
+            withResourcePolicy: async (_policy, run) => run(),
+        };
+        return page;
+    };
+    const createStealthSession = () => ({
+        fetch: stealthCall,
+        async replayChallenged() {
+            throw new ProviderError("Recorded transports cannot replay an engine-owned challenge", {
+                code: "REPLAY_SESSION_MISMATCH",
+            });
+        },
+        cookies: {
+            ...emptyCookieJar,
+            has: () => false,
+            setFromCookieStrings: () => { },
+            toHeader: () => "",
+            snapshot: () => ({}),
+            restore: () => { },
+            serialize: emptyCookieStore,
+            deserialize: () => { },
+            clear: () => { },
+        },
+        redirects: {
+            run: async (options) => {
+                const final = await stealthCall(options.url, options);
+                return {
+                    final,
+                    hops: [],
+                    reason: "completed",
+                    cookies: {},
+                    cookieStore: emptyCookieStore(),
+                };
+            },
+        },
+        close: () => { },
+    });
+    return {
+        env: { get: () => undefined },
+        credential,
+        request,
+        http: {
+            request: (url, options) => httpCall(options?.method?.toUpperCase() ?? "GET", url, options?.body, options),
+            get: (url, options) => httpCall("GET", url, undefined, options),
+            post: (url, body, options) => httpCall("POST", url, body, options),
+            put: (url, body, options) => httpCall("PUT", url, body, options),
+            delete: (url, options) => httpCall("DELETE", url, undefined, options),
+            stream: async (url, options) => {
+                const response = await dispatch({
+                    transport: "http",
+                    method: options?.method?.toUpperCase() ?? "GET",
+                    url,
+                    body: options?.body,
+                    options,
+                });
+                return {
+                    status: response.status,
+                    ok: response.status >= 200 && response.status < 300,
+                    headers: response.headers,
+                    body: streamFromBytes(response.bytes),
+                    bytes: () => singleBytes(response.bytes),
+                    textChunks: () => singleText(response.text),
+                    lines: () => singleText(response.text),
+                };
+            },
+            sse: async (url, options) => {
+                const response = await dispatch({
+                    transport: "http",
+                    method: options?.method?.toUpperCase() ?? "GET",
+                    url,
+                    body: options?.body,
+                    options,
+                });
+                async function* messages() {
+                    for (const block of response.text.split(/\r?\n\r?\n/)) {
+                        const data = block
+                            .split(/\r?\n/)
+                            .filter((line) => line.startsWith("data:"))
+                            .map((line) => line.slice(5).trimStart())
+                            .join("\n");
+                        if (!data)
+                            continue;
+                        yield { event: "message", data, json: () => JSON.parse(data) };
+                    }
+                }
+                return messages();
+            },
+        },
+        cache: createProviderCache({ providerId: `standard-test-${operationName}` }),
+        state,
+        stealth: {
+            fetch: stealthCall,
+            createSession: createStealthSession,
+        },
+        browser: {
+            engine: "playwright-stealth",
+            newPage: async () => createBrowserPage(),
+            rawPage: async () => createBrowserPage(),
+            withIsolatedContext: async (handler) => handler(createBrowserPage()),
+            solveChallenge: async (challenge) => (await dispatch({
+                transport: "browser",
+                method: "solveChallenge",
+                body: challenge,
+            })).data,
+        },
+        ...(provider.native
+            ? {
+                native: {
+                    network: {
+                        connectTcp: async (options) => {
+                            const request = snapshotNativeConnectInput(options);
+                            requireNativeEgress().assertConnect(request, "disabled");
+                            return createNativeConnection(await dispatch({
+                                transport: "native",
+                                method: "connectTcp",
+                                url: `tcp://${request.host}:${request.port}`,
+                                options: request,
+                            }), dispatch, `tcp://${request.host}:${request.port}`);
+                        },
+                        connectTls: async (options) => {
+                            const request = snapshotNativeConnectInput(options);
+                            requireNativeEgress().assertConnect(request, "required");
+                            return createNativeConnection(await dispatch({
+                                transport: "native",
+                                method: "connectTls",
+                                url: `tls://${request.host}:${request.port}`,
+                                options: request,
+                            }), dispatch, `tls://${request.host}:${request.port}`);
+                        },
+                        grantTcpEgress: (input) => {
+                            return requireNativeEgress().grant(snapshotNativeGrantInput(input));
+                        },
+                    },
+                },
+            }
+            : {}),
+        trace: { span: async (_name, fn) => fn() },
+        auth: { requestField: async (name) => unsupported(`ctx.auth.requestField(${name})`) },
+        ocr: createUnsupportedOcrClient("Standard test upstream context does not support ctx.ocr.recognize"),
+        stt: createUnsupportedSttClient("Standard test upstream context does not support ctx.stt.transcribe"),
+        resolver: {
+            solve: async () => unsupported("ctx.resolver.solve"),
+        },
+        handle: createTestHandleContext({
+            providerId: `standard-test-${operationName}`,
+            request,
+            state,
+        }),
+    };
+}
+function createNativeConnection(initialResponse, dispatch, url) {
+    let unread = initialResponse.bytes.slice(0);
+    return {
+        read: async () => {
+            if (unread.byteLength === 0)
+                return null;
+            const bytes = unread;
+            unread = new Uint8Array();
+            return bytes;
+        },
+        write: async (body) => {
+            const response = await dispatch({ transport: "native", method: "write", url, body });
+            unread = response.bytes.slice(0);
+        },
+        close: async () => { },
+    };
+}
 function unsupported(name) {
     throw new Error(`Standard test snapshot context does not support ${name}`);
 }
-function createSnapshotContext(rawFixture) {
+export function createSnapshotContext(rawFixture) {
     const credential = {
         mode: "none",
         get: () => undefined,
@@ -85,19 +458,54 @@ function createSnapshotContext(rawFixture) {
         getAccessToken: () => undefined,
         getScopes: () => [],
     };
-    const request = { headers: {} };
+    const request = { headers: {}, connectionId: STANDARD_TEST_CONNECTION_ID };
     const state = createMemoryProviderRuntimeState();
-    return {
+    const streamCaptureGroup = findStreamCaptureGroup(rawFixture);
+    let nextCaptureItem = 0;
+    const replayJsonResponse = () => {
+        if (!streamCaptureGroup)
+            return jsonResponse(rawFixture);
+        const item = streamCaptureGroup.items[nextCaptureItem];
+        if (!item) {
+            throw new Error(`Stream fixture exhausted: no recorded response exists for ordinary HTTP call ${nextCaptureItem + 1}.`);
+        }
+        if (item.kind !== "response") {
+            throw new Error(`Stream fixture call-order mismatch: expected a stream call at position ${nextCaptureItem + 1}, received an ordinary HTTP call.`);
+        }
+        nextCaptureItem += 1;
+        return jsonResponse(item.value);
+    };
+    const context = {
         env: { get: () => undefined },
         credential,
         request,
         http: {
-            request: async () => jsonResponse(rawFixture),
-            get: async () => jsonResponse(rawFixture),
-            post: async () => jsonResponse(rawFixture),
-            put: async () => jsonResponse(rawFixture),
-            delete: async () => jsonResponse(rawFixture),
-            stream: async () => unsupported("ctx.http.stream"),
+            request: async () => replayJsonResponse(),
+            get: async () => replayJsonResponse(),
+            post: async () => replayJsonResponse(),
+            put: async () => replayJsonResponse(),
+            delete: async () => replayJsonResponse(),
+            stream: async (...args) => {
+                if (!streamCaptureGroup)
+                    return unsupported("ctx.http.stream");
+                const item = streamCaptureGroup.items[nextCaptureItem];
+                if (!item) {
+                    throw new Error(`Stream fixture exhausted: no recorded evidence exists for stream call ${nextCaptureItem + 1}.`);
+                }
+                if (item.kind !== "stream") {
+                    throw new Error(`Stream fixture call-order mismatch: expected an ordinary HTTP call at position ${nextCaptureItem + 1}, received a stream call.`);
+                }
+                if (item.evidence.request) {
+                    const expected = item.evidence.request;
+                    const actualMethod = (args[1]?.method ?? "GET").toUpperCase();
+                    const actualPath = replayRequestPath(args[0], expected.path);
+                    if (actualMethod !== expected.method || actualPath !== expected.path) {
+                        throw new Error(`Stream fixture request mismatch: expected ${expected.method} ${expected.path}, received ${actualMethod} ${actualPath}.`);
+                    }
+                }
+                nextCaptureItem += 1;
+                return replayStreamEvidence(item.evidence);
+            },
             sse: async () => unsupported("ctx.http.sse"),
         },
         cache: createProviderCache({ providerId: "standard-test" }),
@@ -119,23 +527,50 @@ function createSnapshotContext(rawFixture) {
         auth: {
             requestField: async (name) => unsupported(`ctx.auth.requestField(${name})`),
         },
+        ocr: createUnsupportedOcrClient("Standard test snapshot context does not support ctx.ocr.recognize"),
         stt: createUnsupportedSttClient("Standard test snapshot context does not support ctx.stt.transcribe"),
-        choice: createTestProviderChoiceContext({
+        resolver: {
+            solve: async () => unsupported("ctx.resolver.solve"),
+        },
+        handle: createTestHandleContext({
             providerId: "standard-test",
             request,
-            credential,
             state,
         }),
     };
+    snapshotCaptureStates.set(context, {
+        assertConsumed() {
+            if (streamCaptureGroup && nextCaptureItem !== streamCaptureGroup.items.length) {
+                throw new Error(`Stream fixture has ${streamCaptureGroup.items.length - nextCaptureItem} unconsumed capture item${streamCaptureGroup.items.length - nextCaptureItem === 1 ? "" : "s"} after handler completion.`);
+            }
+        },
+        consumed: () => nextCaptureItem,
+    });
+    return context;
+}
+function replayRequestPath(requestUrl, expectedPath) {
+    if (/^[a-z][a-z\d+.-]*:\/\//i.test(requestUrl) || requestUrl.startsWith("/")) {
+        return requestPathForFixture(requestUrl);
+    }
+    return requestPathForFixture(new URL(requestUrl, `https://fixture.invalid${expectedPath}`).toString());
 }
 async function transformSnapshotOutput(provider, rawFixture) {
     const entries = Object.entries(provider.operations);
-    const context = createSnapshotContext(rawFixture);
+    const captureStates = [];
     const outputs = await Promise.all(entries.map(async ([operationName, operation]) => {
+        const context = createSnapshotContext(rawFixture);
         const request = operation.fixtures?.request ?? {};
         const output = await operation.handler(context, request);
+        const captureState = snapshotCaptureStates.get(context);
+        if (captureState)
+            captureStates.push(captureState);
+        if (captureState?.consumed())
+            captureState.assertConsumed();
         return [operationName, output];
     }));
+    if (findStreamCaptureGroup(rawFixture) && !captureStates.some((state) => state.consumed() > 0)) {
+        captureStates[0]?.assertConsumed();
+    }
     if (outputs.length === 1) {
         return outputs[0]?.[1];
     }
@@ -154,7 +589,7 @@ function formatJsonDiff(current, expected) {
         const expectedLine = expectedLines[index];
         if (currentLine === expectedLine) {
             if (currentLine !== undefined) {
-                lines.push(`  ${currentLine}`);
+                lines.push(`	${currentLine}`);
             }
             continue;
         }
@@ -180,16 +615,51 @@ function expectSchemaFixture(operationName, fieldName, fixture, result) {
 function parseSchemaFixture(operationName, fieldName, schema, fixture) {
     expectSchemaFixture(operationName, fieldName, fixture, safeParseSchemaSync(schema, fixture, `operations.${operationName}.fixtures.${fieldName}`));
 }
-/**
- * Run standard SDK tests for a provider in one line.
- *
- * Usage:
- * import { myProvider } from "../index";
- * import { runStandardTests } from "@apifuse/provider-sdk/testing";
- * runStandardTests(myProvider, rawFixture, manifest, { snapshot: true });
- */
-export function runStandardTests(provider, rawFixture, manifest, options = {}) {
+async function materializeHandlerOutput(output) {
+    if (!(output instanceof Response))
+        return output;
+    const contentType = output.headers.get("content-type") ?? "";
+    if (contentType.includes("application/json"))
+        return output.json();
+    return output.text();
+}
+/** Internal execution seam exported for focused SDK tests; use runStandardTests as public API. */
+export async function executeStandardTestHandler(provider, operationName, upstreamStub) {
+    const operation = provider.operations[operationName];
+    if (!operation)
+        throw new Error(`Unknown operation "${operationName}".`);
+    if (operation.fixtures?.request === undefined) {
+        throw new Error(`Operation "${operationName}" has no fixtures.request for handler E2E execution.`);
+    }
+    const context = createUpstreamContext(provider, operationName, upstreamStub);
+    const output = await materializeHandlerOutput(await operation.handler(context, operation.fixtures.request));
+    const result = safeParseSchemaSync(operation.output, output, `operations.${operationName}.handler.output`);
+    if (!result.success) {
+        throw new Error([
+            `Handler output for operation "${operationName}" failed schema validation.`,
+            formatJsonDiff({ valid: false, value: output, error: result.error }, { valid: true, value: output }),
+        ].join("\n"));
+    }
+    return output;
+}
+function isOptionsShortcut(value) {
+    return (value !== null &&
+        typeof value === "object" &&
+        !Array.isArray(value) &&
+        Object.hasOwn(value, "upstreamStub"));
+}
+export function runStandardTests(provider, rawFixtureOrOptions, manifest, legacyOptions) {
+    const shortcut = manifest === undefined && legacyOptions === undefined && isOptionsShortcut(rawFixtureOrOptions);
+    const rawFixture = shortcut ? undefined : rawFixtureOrOptions;
+    const options = shortcut ? rawFixtureOrOptions : (legacyOptions ?? {});
     const operations = Object.entries(provider.operations);
+    const warnings = options.upstreamStub
+        ? operations
+            .filter(([, operation]) => operation.fixtures?.request === undefined)
+            .map(([operationName]) => `[provider-sdk] Operation "${provider.id}.${operationName}" has no fixtures.request, so runStandardTests cannot invoke its handler E2E.`)
+        : operations.map(([operationName]) => `[provider-sdk] Operation "${provider.id}.${operationName}" has no handler E2E coverage in runStandardTests; configure upstreamStub to invoke the real handler.`);
+    for (const warning of warnings)
+        console.warn(warning);
     const assertFixtureValidation = () => {
         expect(rawFixture).toBeDefined();
         expect(isJsonCompatible(rawFixture)).toBe(true);
@@ -289,12 +759,26 @@ export function runStandardTests(provider, rawFixture, manifest, options = {}) {
                 const actual = await transformSnapshotOutput(provider, rawFixture);
                 const serialized = stableStringify(actual);
                 const snapshotFile = Bun.file(snapshotPath);
-                if (shouldUpdateSnapshots() || !(await snapshotFile.exists())) {
+                const snapshotExists = await snapshotFile.exists();
+                if (!snapshotExists && options.requireSnapshot && !shouldUpdateSnapshots()) {
+                    throw new Error(`Required golden snapshot is missing: ${snapshotPath}. Regenerate it with bun test --update-snapshots.`);
+                }
+                if (shouldUpdateSnapshots() || !snapshotExists) {
                     await Bun.write(snapshotPath, serialized);
                 }
                 const expected = JSON.parse(await Bun.file(snapshotPath).text());
                 expect(actual).toEqual(expected);
             });
         }
+        if (options.upstreamStub) {
+            for (const [operationName, operation] of operations) {
+                if (operation.fixtures?.request === undefined)
+                    continue;
+                it(`invokes the real ${operationName} handler with canned upstream responses`, async () => {
+                    await executeStandardTestHandler(provider, operationName, options.upstreamStub);
+                });
+            }
+        }
     });
+    return { warnings };
 }

package/dist/trace-sanitization.d.ts

@@ -0,0 +1,6 @@
+import { type DiagnosticRedactor } from "./runtime/diagnostic-redactor.js";
+import type { TraceSpan } from "./types.js";
+/** Span names are SDK-authored identifiers; retain them while preventing log injection. */
+export declare function sanitizeSpanNameForOutput(value: string, redact?: DiagnosticRedactor): string;
+export declare function sanitizeTraceAttributes(attributes: Record<string, unknown>, redact?: DiagnosticRedactor, reservedKeys?: Iterable<string>): Record<string, string | number | boolean>;
+export declare function sanitizeSpanForOutput(span: TraceSpan, additionalAttributes?: Record<string, string>, redact?: DiagnosticRedactor): TraceSpan;