@atomic-chat/core 0.5.1

package/dist/speculative/transcription-registry.js

@@ -0,0 +1,94 @@
+/**
+ * Ported verbatim from: extensions/llamacpp-upstream-extension/src/transcriptionRegistry.ts
+ * The voice model.
+ *
+ * Voice input transcribes on the same bundled llama.cpp engine that runs chat:
+ * its `libmtmd` already carries the `voxtral` audio projector, and `llama-server`
+ * already serves an OpenAI-compatible `/v1/audio/transcriptions`. So the model
+ * is the only thing that has to be fetched, and it goes through the ordinary
+ * download pipeline like any other GGUF.
+ *
+ * One model, deliberately. A tier picker would be a second thing to explain in
+ * the setup wizard, and the sizes here are already dominated by the weights.
+ */
+/** Model id, and the llama-server alias (`-a`) it is loaded under. */
+export const TRANSCRIPTION_MODEL_ID = 'ggml-org/Voxtral-Mini-3B-2507-Q4_K_M';
+export const TRANSCRIPTION_MODEL_HF_REPO = 'ggml-org/Voxtral-Mini-3B-2507-GGUF';
+const HF_BASE = `https://huggingface.co/${TRANSCRIPTION_MODEL_HF_REPO}/resolve/main`;
+export const TRANSCRIPTION_MODEL_URL = `${HF_BASE}/Voxtral-Mini-3B-2507-Q4_K_M.gguf`;
+export const TRANSCRIPTION_MMPROJ_URL = `${HF_BASE}/mmproj-Voxtral-Mini-3B-2507-Q8_0.gguf`;
+/** Exact sizes from the Hugging Face API, so the progress bar has a real total. */
+export const TRANSCRIPTION_MODEL_BYTES = 2_473_001_920;
+export const TRANSCRIPTION_MMPROJ_BYTES = 715_714_080;
+export const TRANSCRIPTION_TOTAL_BYTES = TRANSCRIPTION_MODEL_BYTES + TRANSCRIPTION_MMPROJ_BYTES;
+/**
+ * Chat template the voice server is loaded with.
+ *
+ * Two things make this mandatory rather than a nicety.
+ *
+ * 1. The template embedded in `ggml-org/Voxtral-Mini-3B-2507-Q4_K_M.gguf` is an
+ *    Unsloth *Devstral* template. It defaults every conversation to a ~1200
+ *    token "You are Devstral, a helpful agentic model … using the OpenHands
+ *    scaffold" system prompt, which llama.cpp then prepends to every
+ *    `/v1/audio/transcriptions` request (that endpoint is a chat completion
+ *    underneath). The model duly behaves like a chat agent: it *hears* the
+ *    audio and answers it — "I'm unable to transcribe audio directly. However,
+ *    I can guide you on how to use Descript, Rev, Amazon Transcribe…" — instead
+ *    of transcribing. Every phrase then trips the plugin's plausibility guard
+ *    and is dropped, so dictation inserts nothing at all.
+ *
+ * 2. Voxtral has a dedicated transcription mode, entered by ending the user
+ *    turn with the `[TRANSCRIBE]` token instead of closing it with `[/INST]`.
+ *    Closing the turn normally — with or without a "transcribe this" prompt —
+ *    leaves the model in conversational mode, where it answers, refuses, or
+ *    returns nothing depending on the clip.
+ *
+ * So: no system prompt, and `[INST]` … `[TRANSCRIBE]` around whatever the
+ * endpoint puts in the user turn (the audio marker, then the caller's `prompt`,
+ * which is where the `lang:xx` directive lands). This server only ever serves
+ * transcription, so treating every message as a transcription turn is honest.
+ *
+ * `String.raw` for consistency with `chatTemplateOverrides.ts`: minja, not JS,
+ * interprets any escapes inside the Jinja source.
+ */
+export const VOXTRAL_TRANSCRIPTION_CHAT_TEMPLATE = String.raw `{%- for message in messages %}
+    {%- set content = namespace(text='') %}
+    {%- if message['content'] is string %}
+        {%- set content.text = message['content'] %}
+    {%- else %}
+        {%- for block in message['content'] %}
+            {%- if block['type'] == 'text' %}
+                {%- set content.text = content.text + block['text'] %}
+            {%- endif %}
+        {%- endfor %}
+    {%- endif %}
+    {%- if message['role'] == 'assistant' %}
+        {{- content.text }}{{- eos_token }}
+    {%- else %}
+        {{- '[INST]' + content.text + '[TRANSCRIBE]' }}
+    {%- endif %}
+{%- endfor %}`;
+/**
+ * Load overrides for the voice server.
+ *
+ * Deliberately small and deterministic: one 30 s `libmtmd` audio window is a few
+ * hundred tokens, a transcript is never long, and this process runs *alongside*
+ * the user's chat model — so it must not size itself to the free VRAM the way a
+ * chat load does.
+ */
+export const TRANSCRIPTION_LOAD_OVERRIDES = {
+    fit: false,
+    ctx_size: 4096,
+    n_predict: 512,
+    parallel: 1,
+    cont_batching: false,
+    // Not optional — see the constant's own note. Without it the model answers
+    // the audio instead of transcribing it and dictation produces nothing.
+    chat_template: VOXTRAL_TRANSCRIPTION_CHAT_TEMPLATE,
+    // Warmup would generate a throwaway token through the audio path for no
+    // benefit; the first real segment arrives seconds later anyway.
+    extra_args: '--no-warmup',
+};
+/** Unload the voice model after this long without a phrase. */
+export const TRANSCRIPTION_IDLE_UNLOAD_MS = 5 * 60_000;
+//# sourceMappingURL=transcription-registry.js.map

package/dist/speculative/transcription-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcription-registry.js","sourceRoot":"","sources":["../../src/speculative/transcription-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,sEAAsE;AACtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,sCAAsC,CAAA;AAE5E,MAAM,CAAC,MAAM,2BAA2B,GAAG,oCAAoC,CAAA;AAE/E,MAAM,OAAO,GAAG,0BAA0B,2BAA2B,eAAe,CAAA;AAEpF,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,OAAO,mCAAmC,CAAA;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,OAAO,wCAAwC,CAAA;AAE1F,mFAAmF;AACnF,MAAM,CAAC,MAAM,yBAAyB,GAAG,aAAa,CAAA;AACtD,MAAM,CAAC,MAAM,0BAA0B,GAAG,WAAW,CAAA;AACrD,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,GAAG,0BAA0B,CAAA;AAE/F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;cAgB/C,CAAA;AAEd;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,GAAG,EAAE,KAAK;IACV,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,GAAG;IACd,QAAQ,EAAE,CAAC;IACX,aAAa,EAAE,KAAK;IACpB,2EAA2E;IAC3E,uEAAuE;IACvE,aAAa,EAAE,mCAAmC;IAClD,wEAAwE;IACxE,gEAAgE;IAChE,UAAU,EAAE,aAAa;CACjB,CAAA;AAEV,+DAA+D;AAC/D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,GAAG,MAAM,CAAA"}

package/dist/telemetry/config.d.ts

@@ -0,0 +1,38 @@
+import type { ParsedDsn } from './dsn.js';
+/**
+ * The core's own Sentry project (`atomic-chat/atomic-chat-core`). A DSN is a public ingest key —
+ * every shipped binary carries it — so it lives in the source: the core reports by itself however it
+ * is run, as the app's daemon, as the CLI, or as a library inside another program.
+ */
+export declare const CORE_SENTRY_DSN = "https://8a1c01c8fc1288ec3e008c639cb00488@o4511535281012736.ingest.us.sentry.io/4512125097476096";
+export interface BakedTelemetry {
+    dsn?: string;
+    environment?: string;
+    gitSha?: string;
+}
+/** What the release build baked into this binary. Empty in development and in tests. */
+export declare const BAKED_TELEMETRY: BakedTelemetry;
+export interface TelemetryConfig {
+    dsn: ParsedDsn;
+    /** `production` for a release binary, `source` for anything built from source (a library user's). */
+    environment: string;
+    /** `atomic-chat-core@<version>`: one release per published core, like the app's git-SHA release. */
+    release: string;
+    /** The commit the binary was built from, when the build knew it. */
+    dist?: string;
+}
+/** A test runner: the built-in project must never hear from one. */
+export declare function isTestRun(env: NodeJS.ProcessEnv): boolean;
+/**
+ * Where error reports go, or null when they go nowhere. An explicit DSN (environment, then the
+ * build) wins; otherwise the core's own project, except under a test runner. Release builds say
+ * `production`, everything else `source`, so a library user's or a developer's build never mixes
+ * with shipped binaries. The `development` environment turns reporting off, as it does in the app.
+ */
+export declare function resolveTelemetryConfig(input: {
+    baked: BakedTelemetry;
+    env: NodeJS.ProcessEnv;
+    version: string;
+    /** Set when the process itself runs under a test runner, whatever `env` was injected. */
+    testRun?: boolean;
+}): TelemetryConfig | null;

package/dist/telemetry/config.js

@@ -0,0 +1,44 @@
+import { parseDsn } from './dsn.js';
+/**
+ * The core's own Sentry project (`atomic-chat/atomic-chat-core`). A DSN is a public ingest key —
+ * every shipped binary carries it — so it lives in the source: the core reports by itself however it
+ * is run, as the app's daemon, as the CLI, or as a library inside another program.
+ */
+export const CORE_SENTRY_DSN = 'https://8a1c01c8fc1288ec3e008c639cb00488@o4511535281012736.ingest.us.sentry.io/4512125097476096';
+/** What the release build baked into this binary. Empty in development and in tests. */
+export const BAKED_TELEMETRY = {
+    ...(typeof __ATOMIC_CORE_SENTRY_DSN__ === 'string' ? { dsn: __ATOMIC_CORE_SENTRY_DSN__ } : {}),
+    ...(typeof __ATOMIC_CORE_SENTRY_ENVIRONMENT__ === 'string'
+        ? { environment: __ATOMIC_CORE_SENTRY_ENVIRONMENT__ }
+        : {}),
+    ...(typeof __ATOMIC_CORE_GIT_SHA__ === 'string' ? { gitSha: __ATOMIC_CORE_GIT_SHA__ } : {}),
+};
+/** A test runner: the built-in project must never hear from one. */
+export function isTestRun(env) {
+    return env['VITEST'] !== undefined || env['NODE_ENV'] === 'test';
+}
+/**
+ * Where error reports go, or null when they go nowhere. An explicit DSN (environment, then the
+ * build) wins; otherwise the core's own project, except under a test runner. Release builds say
+ * `production`, everything else `source`, so a library user's or a developer's build never mixes
+ * with shipped binaries. The `development` environment turns reporting off, as it does in the app.
+ */
+export function resolveTelemetryConfig(input) {
+    const { baked, env } = input;
+    const explicit = env['ATOMIC_CORE_SENTRY_DSN']?.trim() || baked.dsn;
+    const testRun = input.testRun === true || isTestRun(env);
+    const dsn = parseDsn(explicit || (testRun ? undefined : CORE_SENTRY_DSN));
+    if (!dsn)
+        return null;
+    const environment = env['ATOMIC_CORE_SENTRY_ENVIRONMENT']?.trim() || baked.environment || 'source';
+    if (environment === 'development')
+        return null;
+    const dist = baked.gitSha?.trim().slice(0, 12);
+    return {
+        dsn,
+        environment,
+        release: `atomic-chat-core@${input.version}`,
+        ...(dist ? { dist } : {}),
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/telemetry/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/telemetry/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAGnC;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAC1B,iGAAiG,CAAA;AAenG,wFAAwF;AACxF,MAAM,CAAC,MAAM,eAAe,GAAmB;IAC7C,GAAG,CAAC,OAAO,0BAA0B,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,GAAG,CAAC,OAAO,kCAAkC,KAAK,QAAQ;QACxD,CAAC,CAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE;QACrD,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,OAAO,uBAAuB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAC5F,CAAA;AAYD,oEAAoE;AACpE,MAAM,UAAU,SAAS,CAAC,GAAsB;IAC9C,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM,CAAA;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAMtC;IACC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;IAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,GAAG,CAAA;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAA;IACzE,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,MAAM,WAAW,GAAG,GAAG,CAAC,gCAAgC,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,WAAW,IAAI,QAAQ,CAAA;IAClG,IAAI,WAAW,KAAK,aAAa;QAAE,OAAO,IAAI,CAAA;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC9C,OAAO;QACL,GAAG;QACH,WAAW;QACX,OAAO,EAAE,oBAAoB,KAAK,CAAC,OAAO,EAAE;QAC5C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1B,CAAA;AACH,CAAC"}

package/dist/telemetry/consent.d.ts

@@ -0,0 +1,21 @@
+/** Who decided whether error reports are sent. */
+export type ConsentSource = 'env' | 'host' | 'stored' | 'default';
+/**
+ * What the environment says: `DO_NOT_TRACK` (the cross-tool convention) only ever turns reports off;
+ * `ATOMIC_CORE_TELEMETRY` turns them on or off. Undefined when neither says anything.
+ */
+export declare function envConsent(env: NodeJS.ProcessEnv): boolean | undefined;
+/**
+ * Whether reports are sent, and why. The core decides for itself, whoever embeds it: on unless
+ * something says off. An "off" from the environment is the user's own and beats everything; after it
+ * comes the host (the app's `productAnalytic` consent, `--telemetry`, `PUT /telemetry`), then an
+ * environment "on", then what the user stored with `atomic-chat-core telemetry on|off`.
+ */
+export declare function resolveConsent(input: {
+    env?: boolean | undefined;
+    host?: boolean | undefined;
+    stored?: boolean | undefined;
+}): {
+    enabled: boolean;
+    source: ConsentSource;
+};

package/dist/telemetry/consent.js

@@ -0,0 +1,35 @@
+const TRUTHY = new Set(['1', 'true', 'on', 'yes']);
+const FALSY = new Set(['0', 'false', 'off', 'no']);
+/**
+ * What the environment says: `DO_NOT_TRACK` (the cross-tool convention) only ever turns reports off;
+ * `ATOMIC_CORE_TELEMETRY` turns them on or off. Undefined when neither says anything.
+ */
+export function envConsent(env) {
+    const dnt = env['DO_NOT_TRACK']?.trim().toLowerCase();
+    if (dnt && TRUTHY.has(dnt))
+        return false;
+    const own = env['ATOMIC_CORE_TELEMETRY']?.trim().toLowerCase();
+    if (own && FALSY.has(own))
+        return false;
+    if (own && TRUTHY.has(own))
+        return true;
+    return undefined;
+}
+/**
+ * Whether reports are sent, and why. The core decides for itself, whoever embeds it: on unless
+ * something says off. An "off" from the environment is the user's own and beats everything; after it
+ * comes the host (the app's `productAnalytic` consent, `--telemetry`, `PUT /telemetry`), then an
+ * environment "on", then what the user stored with `atomic-chat-core telemetry on|off`.
+ */
+export function resolveConsent(input) {
+    if (input.env === false)
+        return { enabled: false, source: 'env' };
+    if (input.host !== undefined)
+        return { enabled: input.host, source: 'host' };
+    if (input.env === true)
+        return { enabled: true, source: 'env' };
+    if (input.stored !== undefined)
+        return { enabled: input.stored, source: 'stored' };
+    return { enabled: true, source: 'default' };
+}
+//# sourceMappingURL=consent.js.map

package/dist/telemetry/consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.js","sourceRoot":"","sources":["../../src/telemetry/consent.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;AAClD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;AAElD;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAsB;IAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACrD,IAAI,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACxC,MAAM,GAAG,GAAG,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC9D,IAAI,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACvC,IAAI,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACvC,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAI9B;IACC,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IACjE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAC5E,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IAClF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;AAC7C,CAAC"}

package/dist/telemetry/core-reporter.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The reporter a core builds for itself, whoever embeds it: the app's daemon (`atomic-chat`), the CLI
+ * (`cli`) or a program that imports the library (`library`, or the name it gives). The host may say
+ * on or off; the environment and the user's stored choice are read here; without any of them the
+ * core reports (see `resolveConsent`).
+ */
+import type { BakedTelemetry } from './config.js';
+import type { SystemContext } from './envelope.js';
+import { ErrorReporter } from './reporter.js';
+/** What `node:os` says about this machine, without anything that names it or its user. */
+export declare function systemContext(): SystemContext;
+export interface CoreReporterInput {
+    /** `atomic-chat`, `cli`, `library`, or the embedding program's own name. */
+    host: string;
+    hostVersion?: string | undefined;
+    ownerScope?: 'app' | 'cli' | undefined;
+    /** The host's consent, when it gave one (`--telemetry on|off`, `AtomicCore.create({ telemetry })`). */
+    enabled?: boolean | undefined;
+    dataFolder: string;
+    /** `<data>/atomic-core/telemetry.json` (`DataLayout.core.telemetry`). */
+    telemetryFile: string;
+    homeDir: string;
+    env: NodeJS.ProcessEnv;
+    platform: NodeJS.Platform;
+    arch: string;
+    version: string;
+    warn: (message: string) => void;
+    baked?: BakedTelemetry | undefined;
+    fetch?: typeof fetch | undefined;
+    system?: SystemContext | undefined;
+    /** Overrides the check of the real process for a test runner (tests of this very function). */
+    testRun?: boolean | undefined;
+}
+export declare function createCoreReporter(input: CoreReporterInput): Promise<ErrorReporter>;
+/** What the CLI prints once per data folder, the first time the core reports because nobody said no. */
+export declare const FIRST_RUN_NOTICE: string;
+/**
+ * Whether to show `FIRST_RUN_NOTICE` now: reports would go out, only because nobody said no, and the
+ * notice was never shown for this data folder. Showing it is recorded.
+ */
+export declare function takeFirstRunNotice(input: {
+    telemetryFile: string;
+    env: NodeJS.ProcessEnv;
+    version: string;
+    baked?: BakedTelemetry | undefined;
+    testRun?: boolean | undefined;
+}): Promise<boolean>;

package/dist/telemetry/core-reporter.js

@@ -0,0 +1,72 @@
+/**
+ * The reporter a core builds for itself, whoever embeds it: the app's daemon (`atomic-chat`), the CLI
+ * (`cli`) or a program that imports the library (`library`, or the name it gives). The host may say
+ * on or off; the environment and the user's stored choice are read here; without any of them the
+ * core reports (see `resolveConsent`).
+ */
+import { cpus, release, totalmem } from 'node:os';
+import { BAKED_TELEMETRY, isTestRun, resolveTelemetryConfig } from './config.js';
+import { envConsent, resolveConsent } from './consent.js';
+import { ErrorReporter } from './reporter.js';
+import { ensureInstallId, readTelemetryFile, writeTelemetryFile } from './store.js';
+/** What `node:os` says about this machine, without anything that names it or its user. */
+export function systemContext() {
+    const cpu = cpus()[0]?.model?.trim();
+    return {
+        osRelease: release(),
+        ...(cpu ? { cpuModel: cpu } : {}),
+        memoryMb: Math.round(totalmem() / (1024 * 1024)),
+    };
+}
+export async function createCoreReporter(input) {
+    const config = resolveTelemetryConfig({
+        baked: input.baked ?? BAKED_TELEMETRY,
+        env: input.env,
+        version: input.version,
+        testRun: input.testRun ?? isTestRun(process.env),
+    });
+    const stored = await readTelemetryFile(input.telemetryFile);
+    // The install id is written only when something could be reported with it.
+    const installId = config ? await ensureInstallId(input.telemetryFile, stored) : undefined;
+    return new ErrorReporter({
+        config,
+        coreVersion: input.version,
+        platform: input.platform,
+        arch: input.arch,
+        ownerScope: input.ownerScope,
+        host: input.host,
+        hostVersion: input.hostVersion,
+        enabled: input.enabled,
+        envConsent: envConsent(input.env),
+        storedConsent: stored.enabled,
+        installId,
+        system: input.system ?? systemContext(),
+        scrub: { dataFolder: input.dataFolder, homeDir: input.homeDir },
+        fetch: input.fetch,
+        onSendError: input.warn,
+    });
+}
+/** What the CLI prints once per data folder, the first time the core reports because nobody said no. */
+export const FIRST_RUN_NOTICE = 'Atomic Chat core sends anonymous crash and error reports (no prompts, file paths or personal data) ' +
+    'to help fix failures. Turn them off with `atomic-chat-core telemetry off` or DO_NOT_TRACK=1.\n';
+/**
+ * Whether to show `FIRST_RUN_NOTICE` now: reports would go out, only because nobody said no, and the
+ * notice was never shown for this data folder. Showing it is recorded.
+ */
+export async function takeFirstRunNotice(input) {
+    const config = resolveTelemetryConfig({
+        baked: input.baked ?? BAKED_TELEMETRY,
+        env: input.env,
+        version: input.version,
+        testRun: input.testRun ?? isTestRun(process.env),
+    });
+    if (!config)
+        return false;
+    const stored = await readTelemetryFile(input.telemetryFile);
+    if (stored.notice_shown ||
+        resolveConsent({ env: envConsent(input.env), stored: stored.enabled }).source !== 'default')
+        return false;
+    await writeTelemetryFile(input.telemetryFile, { ...stored, notice_shown: true });
+    return true;
+}
+//# sourceMappingURL=core-reporter.js.map

package/dist/telemetry/core-reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-reporter.js","sourceRoot":"","sources":["../../src/telemetry/core-reporter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAEhF,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAEzD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAEnF,0FAA0F;AAC1F,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACpC,OAAO;QACL,SAAS,EAAE,OAAO,EAAE;QACpB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;KACjD,CAAA;AACH,CAAC;AAyBD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAwB;IAC/D,MAAM,MAAM,GAAG,sBAAsB,CAAC;QACpC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,eAAe;QACrC,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;KACjD,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAC3D,2EAA2E;IAC3E,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACzF,OAAO,IAAI,aAAa,CAAC;QACvB,MAAM;QACN,WAAW,EAAE,KAAK,CAAC,OAAO;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;QACjC,aAAa,EAAE,MAAM,CAAC,OAAO;QAC7B,SAAS;QACT,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,aAAa,EAAE;QACvC,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;QAC/D,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,IAAI;KACxB,CAAC,CAAA;AACJ,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,MAAM,gBAAgB,GAC3B,qGAAqG;IACrG,gGAAgG,CAAA;AAElG;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAMxC;IACC,MAAM,MAAM,GAAG,sBAAsB,CAAC;QACpC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,eAAe;QACrC,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;KACjD,CAAC,CAAA;IACF,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAC3D,IACE,MAAM,CAAC,YAAY;QACnB,cAAc,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS;QAE3F,OAAO,KAAK,CAAA;IACd,MAAM,kBAAkB,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;IAChF,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/telemetry/daemon.d.ts

@@ -0,0 +1,40 @@
+/**
+ * The process-level side of error reporting for a core that owns its process — the app's daemon
+ * and the CLI's: the `--telemetry` flag, and the handlers that report what nothing else caught.
+ * A program that imports the library keeps its own process and gets none of this.
+ */
+import type { ProcessFailureSource } from './reports.js';
+import type { ErrorSink } from './types.js';
+/**
+ * `daemon --telemetry on|off`: the host's consent. Absent means the host said nothing, and the core
+ * decides for itself (on, unless the environment or the user's stored choice says off).
+ */
+export declare function parseTelemetryFlag(value: string | undefined): boolean | undefined;
+export interface FatalDeps {
+    reporter: ErrorSink & {
+        flush(timeoutMs?: number): Promise<void>;
+    };
+    writeStderr: (text: string) => unknown;
+    exit: (code: number) => unknown;
+    flushTimeoutMs?: number;
+}
+/**
+ * The end of the daemon: say why on stderr (the app keeps it as `core-start.log`), report it, give the
+ * report up to two seconds to leave, exit 1 — the exit code an uncaught throw has without handlers.
+ */
+export declare function failFatally(source: ProcessFailureSource, error: unknown, deps: FatalDeps): Promise<void>;
+export interface ProcessEvents {
+    on(event: 'uncaughtException' | 'unhandledRejection', listener: (error: unknown) => void): unknown;
+}
+/**
+ * Report an uncaught exception or an unhandled rejection, then exit 1 either way. Without this a
+ * capture-only rejection handler would leave Bun running (and exiting 0 later) where it died before.
+ * A second failure while the first is being reported does not start another exit.
+ */
+export declare function installProcessHandlers(target: ProcessEvents, deps: FatalDeps): void;
+/** `installProcessHandlers` for one process, given where its stderr goes and how it exits. */
+export declare function processHandlersFor(target: ProcessEvents, writeStderr: (text: string) => unknown, exit: (code: number) => unknown): (deps: Omit<FatalDeps, 'writeStderr' | 'exit'>) => void;
+/** A core logger that also leaves its warn and error lines as the breadcrumbs of the next report. */
+export declare function breadcrumbLogger(reporter: {
+    breadcrumb(level: 'warning' | 'error', message: string): void;
+}, write: (level: 'info' | 'warn' | 'error', message: string) => void): (level: 'info' | 'warn' | 'error', message: string) => void;

package/dist/telemetry/daemon.js

@@ -0,0 +1,67 @@
+/**
+ * The process-level side of error reporting for a core that owns its process — the app's daemon
+ * and the CLI's: the `--telemetry` flag, and the handlers that report what nothing else caught.
+ * A program that imports the library keeps its own process and gets none of this.
+ */
+import { inspect } from 'node:util';
+import { processFailureReport } from './reports.js';
+/**
+ * `daemon --telemetry on|off`: the host's consent. Absent means the host said nothing, and the core
+ * decides for itself (on, unless the environment or the user's stored choice says off).
+ */
+export function parseTelemetryFlag(value) {
+    if (value === undefined)
+        return undefined;
+    if (value === 'on')
+        return true;
+    if (value === 'off')
+        return false;
+    throw new Error(`--telemetry takes "on" or "off", not "${value}".`);
+}
+/**
+ * The end of the daemon: say why on stderr (the app keeps it as `core-start.log`), report it, give the
+ * report up to two seconds to leave, exit 1 — the exit code an uncaught throw has without handlers.
+ */
+export async function failFatally(source, error, deps) {
+    try {
+        deps.writeStderr(`${inspect(error)}\n`);
+    }
+    catch {
+        // stderr is gone; the report is all that is left
+    }
+    const report = processFailureReport(source, error);
+    if (report) {
+        deps.reporter.capture(report);
+        await deps.reporter.flush(deps.flushTimeoutMs ?? 2_000);
+    }
+    deps.exit(1);
+}
+/**
+ * Report an uncaught exception or an unhandled rejection, then exit 1 either way. Without this a
+ * capture-only rejection handler would leave Bun running (and exiting 0 later) where it died before.
+ * A second failure while the first is being reported does not start another exit.
+ */
+export function installProcessHandlers(target, deps) {
+    let failing = false;
+    const handle = (source) => (error) => {
+        if (failing)
+            return;
+        failing = true;
+        void failFatally(source, error, deps);
+    };
+    target.on('uncaughtException', handle('uncaught_exception'));
+    target.on('unhandledRejection', handle('unhandled_rejection'));
+}
+/** `installProcessHandlers` for one process, given where its stderr goes and how it exits. */
+export function processHandlersFor(target, writeStderr, exit) {
+    return (deps) => installProcessHandlers(target, { ...deps, writeStderr, exit });
+}
+/** A core logger that also leaves its warn and error lines as the breadcrumbs of the next report. */
+export function breadcrumbLogger(reporter, write) {
+    return (level, message) => {
+        write(level, message);
+        if (level !== 'info')
+            reporter.breadcrumb(level === 'warn' ? 'warning' : 'error', message);
+    };
+}
+//# sourceMappingURL=daemon.js.map

package/dist/telemetry/daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.js","sourceRoot":"","sources":["../../src/telemetry/daemon.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAInD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IACjC,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,IAAI,CAAC,CAAA;AACrE,CAAC;AASD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAA4B,EAC5B,KAAc,EACd,IAAe;IAEf,IAAI,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAClD,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC7B,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,CAAA;IACzD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACd,CAAC;AAMD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAqB,EAAE,IAAe;IAC3E,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,MAAM,GAAG,CAAC,MAA4B,EAAE,EAAE,CAAC,CAAC,KAAc,EAAE,EAAE;QAClE,IAAI,OAAO;YAAE,OAAM;QACnB,OAAO,GAAG,IAAI,CAAA;QACd,KAAK,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IACvC,CAAC,CAAA;IACD,MAAM,CAAC,EAAE,CAAC,mBAAmB,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAA;IAC5D,MAAM,CAAC,EAAE,CAAC,oBAAoB,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAA;AAChE,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAChC,MAAqB,EACrB,WAAsC,EACtC,IAA+B;IAE/B,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;AACjF,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,gBAAgB,CAC9B,QAA2E,EAC3E,KAAkE;IAElE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QACrB,IAAI,KAAK,KAAK,MAAM;YAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC5F,CAAC,CAAA;AACH,CAAC"}

package/dist/telemetry/dsn.d.ts

@@ -0,0 +1,15 @@
+/** A Sentry DSN split into what an envelope POST needs. */
+export interface ParsedDsn {
+    /** The original DSN; it goes into the envelope header. */
+    dsn: string;
+    publicKey: string;
+    host: string;
+    projectId: string;
+    /** `<scheme>//<host>[<path>]/api/<project>/envelope/` */
+    envelopeUrl: string;
+}
+/**
+ * Parse `<scheme>://<public key>@<host>[/<path>]/<project id>`. Returns null for anything else, so a
+ * malformed secret leaves reporting off instead of throwing at start-up.
+ */
+export declare function parseDsn(raw: string | undefined): ParsedDsn | null;

package/dist/telemetry/dsn.js

@@ -0,0 +1,32 @@
+/**
+ * Parse `<scheme>://<public key>@<host>[/<path>]/<project id>`. Returns null for anything else, so a
+ * malformed secret leaves reporting off instead of throwing at start-up.
+ */
+export function parseDsn(raw) {
+    if (!raw)
+        return null;
+    let url;
+    try {
+        url = new URL(raw.trim());
+    }
+    catch {
+        return null;
+    }
+    if (url.protocol !== 'https:' && url.protocol !== 'http:')
+        return null;
+    if (!url.username)
+        return null;
+    const segments = url.pathname.split('/').filter(Boolean);
+    const projectId = segments.pop();
+    if (!projectId || !/^\d+$/.test(projectId))
+        return null;
+    const basePath = segments.length ? `/${segments.join('/')}` : '';
+    return {
+        dsn: raw.trim(),
+        publicKey: decodeURIComponent(url.username),
+        host: url.host,
+        projectId,
+        envelopeUrl: `${url.protocol}//${url.host}${basePath}/api/${projectId}/envelope/`,
+    };
+}
+//# sourceMappingURL=dsn.js.map

package/dist/telemetry/dsn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dsn.js","sourceRoot":"","sources":["../../src/telemetry/dsn.ts"],"names":[],"mappings":"AAWA;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAuB;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IACtE,IAAI,CAAC,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAA;IAChC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAChE,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE;QACf,SAAS,EAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3C,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS;QACT,WAAW,EAAE,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,GAAG,QAAQ,QAAQ,SAAS,YAAY;KAClF,CAAA;AACH,CAAC"}

package/dist/telemetry/envelope.d.ts

@@ -0,0 +1,97 @@
+import type { TelemetryConfig } from './config.js';
+import type { ParsedDsn } from './dsn.js';
+import type { ScrubContext } from './scrub.js';
+import type { StackFrame } from './stack.js';
+import type { ErrorReport, ReportLevel } from './types.js';
+export interface Breadcrumb {
+    timestamp: number;
+    level: 'warning' | 'error';
+    message: string;
+}
+/** What the core finds out about the machine by itself (`node:os`), host or no host. */
+export interface SystemContext {
+    /** The kernel release (`os.release()`). */
+    osRelease?: string | undefined;
+    cpuModel?: string | undefined;
+    memoryMb?: number | undefined;
+}
+/** Everything about the process an event is stamped with. */
+export interface EventContext {
+    config: TelemetryConfig;
+    eventId: string;
+    /** Seconds since the epoch. */
+    timestamp: number;
+    platform: NodeJS.Platform;
+    arch: string;
+    coreVersion: string;
+    ownerScope?: string | undefined;
+    /** Who embeds the core (`atomic-chat`, `cli`, `library`, …) and its version when it said. */
+    host?: string | undefined;
+    hostVersion?: string | undefined;
+    /** The host's anonymous user id, else this data folder's install id: the only user identifier. */
+    userId?: string | undefined;
+    /** Already sanitised tags from the host. They win over the core's own on the same key. */
+    appTags: Record<string, string>;
+    system?: SystemContext | undefined;
+    breadcrumbs: readonly Breadcrumb[];
+    scrub: ScrubContext;
+}
+export interface SentryException {
+    type: string;
+    value: string;
+    mechanism: {
+        type: string;
+        handled: boolean;
+    };
+    stacktrace?: {
+        frames: StackFrame[];
+    };
+}
+export interface SentryEvent {
+    event_id: string;
+    timestamp: number;
+    platform: 'node';
+    level: ReportLevel;
+    logger: 'atomic-chat-core';
+    release: string;
+    dist?: string;
+    environment: string;
+    sdk: {
+        name: string;
+        version: string;
+    };
+    user: {
+        id?: string;
+        ip_address: null;
+    };
+    contexts: {
+        os: {
+            name: string;
+            version?: string;
+        };
+        device: {
+            arch: string;
+            memory_size?: number;
+        };
+    };
+    tags: Record<string, string>;
+    fingerprint?: string[];
+    exception: {
+        values: SentryException[];
+    };
+    breadcrumbs?: {
+        values: Array<Breadcrumb & {
+            category: 'log';
+        }>;
+    };
+    extra?: Record<string, string>;
+}
+/**
+ * The Sentry event for one report. Zero-PII by construction: no server name, no IP, no local
+ * variables, no URL or body; every string passes the scrubber; tags are allow-listed and short.
+ */
+export declare function buildEvent(report: ErrorReport, ctx: EventContext): SentryEvent;
+/** A single-event envelope: envelope header, item header, payload, newline-separated. */
+export declare function buildEnvelope(event: SentryEvent, dsn: ParsedDsn, sentAt: Date): string;
+/** The `X-Sentry-Auth` header of an envelope POST. */
+export declare function authHeader(dsn: ParsedDsn, version: string): string;