@augustdigital/sdk 8.26.0 → 9.1.0

package/lib/core/analytics/sentry.d.ts

@@ -12,16 +12,28 @@ export declare function resetErrorDedupe(): void;
  * Initialize Sentry with SDK-specific configuration. Idempotent: re-calls
  * only refresh user identity and the cached API-key hash.
  *
+ * Breaking change in v9: `appName` moved from the optional fifth parameter
+ * to the required third parameter, so every telemetry stream carries an
+ * application identity (the `AugustSDK` constructor has required it since
+ * v5). Callers on the old positional order get a synchronous validation
+ * error rather than silently anonymous events.
+ *
  * @param config - Analytics configuration. Pass `tracesSampleRate` to
  *   override the default of `0.1`.
  * @param environment - Current environment (DEV or PROD).
+ * @param appName - App-name slug, required. Set as the global `app.name`
+ *   tag on every event and used to derive `partner.id`. Identifier-shaped:
+ *   3–64 chars, `[a-zA-Z0-9._-]` only, and not an EVM address — the same
+ *   rules the `AugustSDK` constructor enforces.
  * @param walletAddress - Optional wallet address for user identification.
  * @param apiKey - Optional API key (hashed for identification).
- * @param appName - Optional app-name slug. Set as the global `app.name`
- *   tag on every event; falls back to `'unverified:anonymous'` when
- *   omitted.
+ * @throws AugustValidationError (code `INVALID_INPUT`) when `appName` is
+ *   missing, empty, mis-typed, out of the allowed length range, contains
+ *   disallowed characters, or is shaped like an EVM address. Thrown before
+ *   any analytics state mutates, even when analytics would be disabled by
+ *   config or environment gates.
  */
-export declare function initializeSentry(config: IAnalyticsConfig, environment: IEnv, walletAddress?: string, apiKey?: string, appName?: string): void;
+export declare function initializeSentry(config: IAnalyticsConfig, environment: IEnv, appName: string, walletAddress?: string, apiKey?: string): void;
 /**
  * Update the current user identity in Sentry.
  * Called when wallet address changes.

package/lib/core/analytics/sentry.js

@@ -9,6 +9,7 @@ exports.getSentry = getSentry;
 exports.resetAnalytics = resetAnalytics;
 exports.captureSdkException = captureSdkException;
 const logger_1 = require("../logger");
+const app_name_1 = require("./app-name");
 const constants_1 = require("./constants");
 const env_1 = require("./env");
 const sentry_runtime_1 = require("./sentry-runtime");
@@ -35,26 +36,6 @@ function getSDKVersion() {
         return 'development';
     }
 }
-/**
- * Check if running on localhost.
- */
-function isLocalhost() {
-    try {
-        if (typeof window !== 'undefined' && window.location) {
-            const hostname = window.location.hostname;
-            return (hostname === 'localhost' ||
-                hostname === '127.0.0.1' ||
-                hostname === '0.0.0.0' ||
-                hostname.startsWith('192.168.') ||
-                hostname.startsWith('10.') ||
-                hostname.endsWith('.local'));
-        }
-    }
-    catch {
-        // Silently fail
-    }
-    return false;
-}
 /**
  * Safely set a Sentry tag. Silently fails on error.
  */
@@ -305,16 +286,32 @@ function createSentrySink() {
  * Initialize Sentry with SDK-specific configuration. Idempotent: re-calls
  * only refresh user identity and the cached API-key hash.
  *
+ * Breaking change in v9: `appName` moved from the optional fifth parameter
+ * to the required third parameter, so every telemetry stream carries an
+ * application identity (the `AugustSDK` constructor has required it since
+ * v5). Callers on the old positional order get a synchronous validation
+ * error rather than silently anonymous events.
+ *
  * @param config - Analytics configuration. Pass `tracesSampleRate` to
  *   override the default of `0.1`.
  * @param environment - Current environment (DEV or PROD).
+ * @param appName - App-name slug, required. Set as the global `app.name`
+ *   tag on every event and used to derive `partner.id`. Identifier-shaped:
+ *   3–64 chars, `[a-zA-Z0-9._-]` only, and not an EVM address — the same
+ *   rules the `AugustSDK` constructor enforces.
  * @param walletAddress - Optional wallet address for user identification.
  * @param apiKey - Optional API key (hashed for identification).
- * @param appName - Optional app-name slug. Set as the global `app.name`
- *   tag on every event; falls back to `'unverified:anonymous'` when
- *   omitted.
+ * @throws AugustValidationError (code `INVALID_INPUT`) when `appName` is
+ *   missing, empty, mis-typed, out of the allowed length range, contains
+ *   disallowed characters, or is shaped like an EVM address. Thrown before
+ *   any analytics state mutates, even when analytics would be disabled by
+ *   config or environment gates.
  */
-function initializeSentry(config, environment, walletAddress, apiKey, appName) {
+function initializeSentry(config, environment, appName, walletAddress, apiKey) {
+    // Enforce the identity contract before anything else — including the
+    // idempotency short-circuit and the disable gates — so a bad appName is
+    // equally loud on every call path and in every environment.
+    const validatedAppName = (0, app_name_1.validateAppName)(appName);
     // SDK construction runs this multiple times (base + adapter constructors).
     // Short-circuit so the disable-reason logs only once per process.
     if (isInitialized) {
@@ -358,7 +355,7 @@ function initializeSentry(config, environment, walletAddress, apiKey, appName) {
         });
         return;
     }
-    if (!forced && isLocalhost()) {
+    if (!forced && (0, env_1.isLocalhost)()) {
         isEnabled = false;
         isInitialized = true;
         logger_1.Logger.log.info('analytics.disabled', { reason: 'localhost' });
@@ -473,11 +470,9 @@ function initializeSentry(config, environment, walletAddress, apiKey, appName) {
         safeSetTag('sdk.runtime', (0, sentry_runtime_1.getSentryRuntime)());
         // `app.name` is the dimension we filter on in Sentry to attribute
         // events to a specific consuming application — see SDK quickstart docs.
-        if (appName) {
-            safeSetTag('app.name', appName);
-        }
+        safeSetTag('app.name', validatedAppName);
         // `unverified:` prefix until the backend API-key → partner-id endpoint exists.
-        safeSetTag('partner.id', appName ? `unverified:${appName}` : 'unverified:anonymous');
+        safeSetTag('partner.id', `unverified:${validatedAppName}`);
         safeSetTag('partner.tier', 'unverified');
         // Bridge the SDK's structured logger into Sentry now that the SDK is live.
         // Without this, Logger.log.error/warn are no-ops in production (no

package/lib/core/analytics/version.d.ts

@@ -3,4 +3,4 @@
  * Generated during publish from package.json version
  * This file is gitignored and created at publish time
  */
-export declare const SDK_VERSION = "8.26.0";
+export declare const SDK_VERSION = "9.1.0";

package/lib/core/analytics/version.js

@@ -6,5 +6,5 @@ exports.SDK_VERSION = void 0;
  * Generated during publish from package.json version
  * This file is gitignored and created at publish time
  */
-exports.SDK_VERSION = '8.26.0';
+exports.SDK_VERSION = '9.1.0';
 //# sourceMappingURL=version.js.map

package/lib/core/base.class.d.ts

@@ -2,6 +2,7 @@ import type { ISolanaConfig, IStellarConfig, IAddress, IChainId, IEnv, IProvider
 import { type IAnalyticsConfig } from './analytics';
 import { type IVersionCheckConfig } from './version-check';
 import { type IAttributionConfig } from './attribution';
+import { type ICuratorAlertsConfig } from './logger/curator-alert';
 interface IKeys {
     august?: string;
     graph?: string;
@@ -10,6 +11,27 @@ interface IKeys {
 interface IMonitoring extends IWSMonitorHeaders {
     slackWebhookUrl?: string;
     env?: IEnv;
+    /**
+     * Curator notifications for failed vault redemptions. Enabled by default
+     * (opt-out model, like `analytics`).
+     *
+     * Stellar vaults are instant-redeem only, so when a redemption fails the
+     * vault's curator has no other way to learn about it. The SDK relays the
+     * failure to August's notification service, which routes it to that curator's
+     * own channel — no credentials or curator identities are held here.
+     *
+     * Set `enabled: false` (or, in Node, the
+     * `AUGUST_SDK_DISABLE_CURATOR_ALERTS` env var) to stop emitting; set
+     * `endpoint` only to point a non-prod deployment at a test relay. Nothing is
+     * emitted unless `monitoring.env` is `PROD`, `NODE_ENV` is neither
+     * `development` nor `test`, and — in a browser, where `NODE_ENV` is not
+     * readable — the page is not served from localhost.
+     *
+     * `enabled: true` is the one exception: it bypasses all three gates, so a
+     * `DEV` or test integration that sets it can page a real curator. See
+     * {@link ICuratorAlertsConfig}.
+     */
+    curatorAlerts?: ICuratorAlertsConfig;
 }
 export interface IAugustBase {
     /**
@@ -25,7 +47,8 @@ export interface IAugustBase {
      * 3–64 characters, `[a-zA-Z0-9._-]` only. Use a slug ("acme-trader"),
      * not a display name ("Acme Trader").
      *
-     * @throws Throws synchronously from the constructor if missing or empty.
+     * @throws AugustValidationError synchronously from the constructor if
+     *   missing, empty, or malformed.
      *
      * @example
      * ```typescript
@@ -120,8 +143,8 @@ export declare class AugustBase {
      * Initialize base SDK with provider configuration and API keys.
      * Sets up the first provider as the active network by default.
      *
-     * @throws If `appName` is missing, malformed, or out of the allowed
-     *   length range — see {@link IAugustBase.appName}.
+     * @throws AugustValidationError if `appName` is missing, malformed, or
+     *   out of the allowed length range — see {@link IAugustBase.appName}.
      */
     constructor({ appName, providers, keys, monitoring, analytics, versionCheck, timeoutMs, publicApiBaseUrl, attribution, }: IAugustBase);
     /**

package/lib/core/base.class.js

@@ -4,36 +4,11 @@ exports.AugustBase = void 0;
 const auth_1 = require("./auth");
 const logger_1 = require("./logger");
 const analytics_1 = require("./analytics");
+const app_name_1 = require("./analytics/app-name");
 const version_check_1 = require("./version-check");
 const fetcher_1 = require("./fetcher");
 const attribution_1 = require("./attribution");
-/**
- * Validate an appName at SDK construction time.
- *
- * Rules (kept intentionally narrow so the value is safe to use as a Sentry
- * tag, an HTTP header value, and a filesystem-safe identifier — this is
- * why we accept slugs only, not display names):
- *  - non-empty after trim
- *  - 3..64 characters
- *  - only `[a-zA-Z0-9._-]`
- *
- * Throws a descriptive Error that names the failed rule and includes a
- * remediation hint pointing at the docs link.
- */
-function validateAppName(value) {
-    const docsHint = 'See https://docs.augustdigital.io/developers/typescript-sdk#app-name';
-    if (typeof value !== 'string' || value.trim().length === 0) {
-        throw new Error(`August SDK: \`appName\` is required. Pass a stable kebab-case slug identifying your application (e.g. "acme-trader"). ${docsHint}`);
-    }
-    const trimmed = value.trim();
-    if (trimmed.length < 3 || trimmed.length > 64) {
-        throw new Error(`August SDK: \`appName\` must be 3-64 characters (got ${trimmed.length}). ${docsHint}`);
-    }
-    if (!/^[a-zA-Z0-9._-]+$/.test(trimmed)) {
-        throw new Error(`August SDK: \`appName\` may only contain letters, digits, '.', '_' and '-' (got "${trimmed}"). Use a slug like "acme-trader", not a display name. ${docsHint}`);
-    }
-    return trimmed;
-}
+const curator_alert_1 = require("./logger/curator-alert");
 /**
  * Base class providing core SDK functionality including provider management,
  * network switching, and authentication state.
@@ -53,13 +28,13 @@ class AugustBase {
      * Initialize base SDK with provider configuration and API keys.
      * Sets up the first provider as the active network by default.
      *
-     * @throws If `appName` is missing, malformed, or out of the allowed
-     *   length range — see {@link IAugustBase.appName}.
+     * @throws AugustValidationError if `appName` is missing, malformed, or
+     *   out of the allowed length range — see {@link IAugustBase.appName}.
      */
     constructor({ appName, providers = {}, keys, monitoring, analytics, versionCheck, timeoutMs, publicApiBaseUrl, attribution, }) {
         // Validate first so the failure mode is a clear, actionable error before
         // any provider / analytics side effects run.
-        this.appName = validateAppName(appName);
+        this.appName = (0, app_name_1.validateAppName)(appName);
         // TODO: change this to false later when august key is required
         this.authorized = true;
         this.providers = providers;
@@ -82,7 +57,7 @@ class AugustBase {
         logger_1.Logger.setDevMode(environment === 'DEV');
         // Initialize analytics (pass API key for hashed identification + the
         // appName so events can be filtered by consuming application).
-        (0, analytics_1.initializeSentry)(analytics ?? { enabled: true }, environment, monitoring?.['x-user-id'], keys?.august, this.appName);
+        (0, analytics_1.initializeSentry)(analytics ?? { enabled: true }, environment, this.appName, monitoring?.['x-user-id'], keys?.august);
         // Best-effort version nudge — fire-and-forget, never blocks init, no
         // network call in production. See `core/version-check.ts` for details.
         (0, version_check_1.runVersionCheck)(versionCheck);
@@ -100,6 +75,16 @@ class AugustBase {
         // `publicApiBaseUrl`: called unconditionally so a prior instance's
         // builder codes never leak into a later instance in the same process.
         (0, attribution_1.setAttribution)(attribution ?? null);
+        // Same reset-on-omit contract, for the same reason: an instance that says
+        // nothing about curator alerts gets the default (on in production), not
+        // whatever a previously-constructed instance asked for.
+        // Reports follow the API this instance reads from — resolved AFTER
+        // `setPublicApiBaseUrl` above, so a staging deployment alerts staging.
+        (0, curator_alert_1.configureCuratorAlerts)(monitoring?.curatorAlerts ?? null, {
+            appName: this.appName,
+            environment: environment,
+            apiBaseUrl: (0, fetcher_1.getPublicApiBaseUrl)(),
+        });
     }
     /**
      * Verify API keys and authorize SDK usage.

package/lib/core/logger/curator-alert.d.ts

@@ -0,0 +1,217 @@
+import type { ChainType, IEnv } from '../../types';
+/**
+ * Path on the August public API that accepts a failed-redemption report. Chain
+ * lives in the payload, not the path — see {@link IRedeemFailureEvent.chain}.
+ */
+export declare const CURATOR_ALERT_PATH = "/alerts/redeem-failure";
+/**
+ * Where a redeem failure is reported: the August public API, which is already
+ * this SDK's read origin and already serves browsers.
+ *
+ * Browser delivery depends on CORS, and the API's allowlist is an enumerated
+ * list of partner origins (`ALLOWED_ORIGIN_REGEX` in the backend), not a
+ * wildcard. This POST sends `Content-Type: application/json`, so it is
+ * preflighted; an integration served from an origin that is not on that list
+ * loses every alert at the preflight. Onboarding a curator therefore has two
+ * halves — enabling the vault and allowlisting the origin their users load.
+ *
+ * That service is the trust boundary, not the destination: it validates the
+ * report, drops any vault it does not know or that has not opted in,
+ * rate-limits per wallet and per vault, and only then forwards to the Telegram
+ * bot that holds the token and the curator's channel. Nothing
+ * credential-shaped ships in this bundle, which is also why this endpoint
+ * takes no API key — a key in a browser bundle is a published key
+ * (CLAUDE.md §5). See {@link reportRedeemFailure} for the trust model.
+ */
+export declare const DEFAULT_CURATOR_ALERT_ENDPOINT: string;
+/** Env equivalent of `monitoring.curatorAlerts.enabled: false`. Node only. */
+export declare const CURATOR_ALERTS_DISABLE_ENV_VAR = "AUGUST_SDK_DISABLE_CURATOR_ALERTS";
+/** Curator-alert reporting. Enabled by default; this is the opt-out. */
+export interface ICuratorAlertsConfig {
+    /**
+     * `false` stops emitting entirely. `true` forces emitting even in an
+     * environment the SDK would otherwise stay quiet in — it bypasses **every**
+     * environment gate: `NODE_ENV` of `development`/`test`, a browser served
+     * from a loopback or private host, and `monitoring.env` other than `PROD`.
+     * It does NOT lift the mainnet-only restriction; only `endpoint` does. A
+     * `DEV` or test
+     * integration that sets it and then fails a mainnet redeem pages a real
+     * curator, so use it only when deliberately exercising the path (pair it
+     * with `endpoint` to aim at a test relay). The only thing that still wins is
+     * the {@link CURATOR_ALERTS_DISABLE_ENV_VAR} kill switch.
+     */
+    enabled?: boolean;
+    /**
+     * Override the relay endpoint. Defaults to
+     * {@link DEFAULT_CURATOR_ALERT_ENDPOINT}. Setting it also lifts the
+     * mainnet-only restriction, so a staging relay can receive testnet failures.
+     */
+    endpoint?: string;
+}
+/** Fields every report carries, whatever stage the redemption failed at. */
+interface IRedeemFailureBase {
+    /**
+     * Chain family the vault lives on. Carried rather than assumed so the
+     * receiving endpoint stays one contract for every chain; it decides which
+     * families it actually serves, and validates the identifiers below by that
+     * family's rules.
+     */
+    chain: ChainType;
+    /**
+     * Network within the family, in that family's own vocabulary — Stellar's
+     * `mainnet`/`testnet`, Solana's `mainnet-beta`, an EVM network name. A plain
+     * string rather than one family's union, because the receiving endpoint
+     * validates it against the family named in `chain`; typing it as Stellar's
+     * two values would make this the narrower half of a contract the rest of this
+     * module describes as chain-agnostic.
+     */
+    network: string;
+    /** Vault identifier in the chain's own format. The endpoint routes on this. */
+    contractId: string;
+    /** Account that attempted the redemption, in the chain's own format. */
+    eoa: string;
+    /** Shares requested, in the vault's smallest unit (unscaled). */
+    sharesRaw: string;
+    /** Failure detail; sanitized and capped before it leaves the process. */
+    error: string;
+}
+/**
+ * A redemption the vault refused before anything reached chain — a failed
+ * simulation, or a vault whose ledger state needs restoring. There is no
+ * on-chain artifact, so the receiving endpoint has nothing to verify the claim
+ * against and treats it as the weaker of the two. Which build stage raised it
+ * stays legible in `error`.
+ */
+interface IRedeemBuildFailure extends IRedeemFailureBase {
+    phase: 'simulation';
+}
+/**
+ * A redemption that executed on chain and failed. `txHash` is what makes this
+ * the stronger claim — the endpoint can verify it — so it is required here
+ * rather than optional, which is the whole reason these are two types.
+ */
+interface IRedeemSubmissionFailure extends IRedeemFailureBase {
+    phase: 'submission';
+    /** The failed transaction. Verifiable, which is why it is not optional. */
+    txHash: string;
+    /** Transaction result code, when the result XDR decoded. */
+    resultCode?: string;
+}
+/**
+ * A redemption failure worth a curator's attention.
+ *
+ * Two members rather than one shape with optional fields, because `txHash` is
+ * only meaningful — and is always available — on the submission path. As a
+ * single interface, `{ phase: 'simulation', txHash }` and a submission report
+ * with no hash both type-checked, and the receiving endpoint's `is_well_formed`
+ * check was the only thing between either and a silently dropped alert. That
+ * check stays, since a server cannot trust its input, but it is no longer
+ * covering for a shape this SDK could have made unrepresentable. The two call
+ * sites in `adapters/stellar/` are the ones this actually constrains, and they
+ * are type-checked by `pnpm build`.
+ *
+ * @internal
+ */
+export type IRedeemFailureEvent = IRedeemBuildFailure | IRedeemSubmissionFailure;
+/** Ambient facts about the reporting SDK instance, supplied by `AugustBase`. */
+export interface ICuratorAlertsContext {
+    /** Carried on the payload so August can tell partner traffic apart. */
+    appName?: string;
+    /**
+     * `monitoring.env`. Anything other than `'PROD'` keeps the SDK quiet unless
+     * `config.enabled` is explicitly `true`.
+     */
+    environment?: IEnv;
+    /**
+     * Effective base URL of the August public API. Reports follow the API this
+     * instance reads from, so a deployment pointed at a staging backend alerts
+     * staging rather than production.
+     */
+    apiBaseUrl?: string;
+}
+/**
+ * Apply constructor config. Called unconditionally by `AugustBase` so an
+ * instance that omits `curatorAlerts` RESETS to the defaults rather than
+ * inheriting a prior instance's settings — same contract as
+ * `setPublicApiBaseUrl` and `setAttribution`.
+ *
+ * Also the supported opt-out for code that calls the `Stellar` namespace
+ * functions directly without constructing an `AugustSDK` (the testnet flow in
+ * the docs), and the only one that works in a browser, where the env var is
+ * unreadable.
+ *
+ * @param config - `monitoring.curatorAlerts`, or `null` to restore defaults.
+ * @param context - Facts about the reporting instance; omitted entirely by a
+ *   caller that only wants to disable reporting.
+ */
+export declare function configureCuratorAlerts(config: ICuratorAlertsConfig | null, context?: ICuratorAlertsContext): void;
+/**
+ * Drop every suppression key. Test-only seam — reconfiguration no longer
+ * clears the window on its own when the configuration is unchanged, so a suite
+ * that reports the same failure across cases needs an explicit reset.
+ * @internal
+ */
+export declare function resetCuratorAlertDedupe(): void;
+/**
+ * Whether an alert would be sent right now.
+ *
+ * Quiet by default outside production, mirroring `analytics`: a partner's Jest
+ * suite or `next dev` session exercising a failing redeem must not page a real
+ * curator. Two gates are needed for that, because they cover different
+ * runtimes — `NODE_ENV` is the Node one, and bundlers strip or stub
+ * `process.env` in the browser, so a locally-served app is recognised by its
+ * hostname instead (CLAUDE.md §5). Without that gate, a browser app run
+ * against mainnet from any loopback or private origin — `localhost`, a
+ * container on `172.20.0.0/16`, `[::1]` — pages a real curator on every
+ * failed redeem. `isLocalhost` in `core/analytics/env` lists the ranges.
+ *
+ * `enabled: true` overrides both — it is the documented way to exercise the
+ * path deliberately, and the SDK's own suite relies on it.
+ *
+ * The env var is read per call (not once at module load) so a consumer that
+ * sets it after import is still honoured, and a test can set and unset it
+ * without re-importing. It deliberately outranks an explicit `enabled: true`:
+ * it is the kill switch, and an operator setting it should not have to find
+ * and edit the construction site to be obeyed.
+ */
+export declare function areCuratorAlertsEnabled(): boolean;
+/**
+ * Report a failed vault redemption for the curator of that vault.
+ *
+ * **Why this exists.** Stellar vaults are instant-redeem only — there is no
+ * request/queue path — so a curator whose users' redemptions are failing has
+ * no signal at all today: the failure surfaces to the user, and to August's
+ * internal Sentry, and stops there. Emitting from the SDK rather than from a
+ * single frontend means any integration can report one (AUGUST-7162) — subject
+ * to the CORS caveat on {@link DEFAULT_CURATOR_ALERT_ENDPOINT}.
+ *
+ * **Trust model.** The endpoint is public by construction — it ships in this
+ * bundle — so the relay treats every event as untrusted input, not as an
+ * attested fact. The SDK's job is to report accurately; the relay's job is to
+ * verify, rate-limit per `{vault, wallet}`, and drop events naming a vault
+ * outside its routing map. `'submission'` events carry a `txHash` the relay can
+ * confirm on chain, which makes them unforgeable; `'simulation'` events have no
+ * on-chain artifact and are treated as the weaker claim. Nothing
+ * credential-shaped is reachable from here: no bot token, no chat id, no
+ * curator identity.
+ *
+ * **Side effects.** At most one `POST` to the relay, fire-and-forget: this runs
+ * inside a `catch` on a money path, so it never awaits, never throws back into
+ * the caller, and never alters the error the caller sees. Suppressed to one
+ * send per `{contractId, eoa, phase, resultCode, error class}` per 10 minutes,
+ * so a wallet retrying a deterministic failure costs a single request. Note the
+ * receiving service applies its own, coarser window on top. A no-op when
+ * reporting is disabled (see {@link areCuratorAlertsEnabled}) and, unless a
+ * custom endpoint is configured, for any network other than mainnet — a
+ * testnet failure is not a curator's problem.
+ *
+ * @param event - The failed attempt. `error` is sanitized (secrets scrubbed via
+ *   `sanitizeString`) and capped at 1500 characters before it leaves the
+ *   process; `sharesRaw` is relayed unscaled, and the receiving service scales
+ *   it for display with the decimals it holds for that vault — which for an
+ *   offset vault are the asset's, not the share token's, so the figure a curator
+ *   sees is a magnitude rather than an exact amount (see AUGUST-6381).
+ * @internal
+ */
+export declare function reportRedeemFailure(event: IRedeemFailureEvent): void;
+export {};