@autter/runtime-node 1.4.0 → 1.5.0

package/dist/sinks-RFV76lF1.d.cts

@@ -0,0 +1,313 @@
+/**
+ * Structural copy of OpenTelemetry's `Attributes` so runtime-core stays
+ * dependency-free (it is bundled into the zero-dependency edge package).
+ * Assignable both ways with `@opentelemetry/api`'s type.
+ */
+type AttributeValue = string | number | boolean | Array<null | undefined | string> | Array<null | undefined | number> | Array<null | undefined | boolean>;
+type Attributes = Record<string, AttributeValue | undefined>;
+
+interface RedactOptions {
+    /**
+     * Extra patterns matched against lower-cased attribute KEYS; a match
+     * masks the whole value. Strings become case-insensitive substring
+     * patterns. Extends the built-in list.
+     */
+    additionalKeyPatterns?: (RegExp | string)[];
+    /**
+     * Extra patterns scrubbed inside string VALUES — attribute values,
+     * exception messages, stack traces, span status messages, URLs, log
+     * lines. Strings are compiled as case-insensitive regex sources. Every
+     * pattern is applied globally. Extends the built-in list.
+     */
+    additionalValuePatterns?: (RegExp | string)[];
+    /** Replacement token. Default "[redacted]". */
+    mask?: string;
+    /**
+     * Scrub email-shaped substrings from ALL string values, not just
+     * sensitive keys. Default true.
+     */
+    scrubEmailValues?: boolean;
+    /**
+     * Scrub Luhn-valid payment card numbers from all string values.
+     * Default true.
+     */
+    scrubCardNumbers?: boolean;
+}
+/**
+ * Return a copy of `attributes` with PII/secrets masked. Never mutates the
+ * input; non-string primitives pass through untouched; `undefined` values
+ * are dropped (OpenTelemetry rejects them).
+ */
+declare function redactAttributes(attributes?: Attributes | null, options?: RedactOptions): Attributes;
+/**
+ * Scrub secrets/PII embedded in one string — an error message, a stack
+ * trace, a URL, a log line. Same value patterns as redactAttributes().
+ */
+declare function redactText(text: string, options?: RedactOptions): string;
+/** A compiled redactor: callable for attribute bags, plus string and
+ * export-time helpers. */
+interface Redactor$1 {
+    (attributes?: Attributes | null): Attributes;
+    /** Scrub one string (messages, stacks, URLs). Identity when disabled. */
+    text(value: string): string;
+    /**
+     * Export-time pass over attributes already on a span (set by any
+     * instrumentation, not just Autter's capture calls). Strings are
+     * value-scrubbed, string values under sensitive KEYS are masked, and
+     * numbers/booleans pass untouched — usage counters such as
+     * `ai.usage.promptTokens` must survive for cost tracking.
+     */
+    exported(attributes: Attributes): Attributes;
+    readonly enabled: boolean;
+}
+
+type RuntimeLogContextValue = string | number | boolean | null | undefined | RuntimeLogContextValue[] | {
+    [key: string]: RuntimeLogContextValue;
+};
+type RuntimeLogContext = Record<string, RuntimeLogContextValue>;
+type RuntimeLogLevel = "debug" | "info" | "warning" | "error";
+type RuntimeOutcome = "succeeded" | "failed" | "degraded" | "cancelled" | "pending";
+type RuntimeOperationKind = "request" | "operation";
+
+/**
+ * Structured, coded errors shared by every Autter Runtime server SDK.
+ *
+ *   export const billingErrors = defineRuntimeErrors("billing", {
+ *     declined: { status: 402, message: "Payment declined", expected: true,
+ *                 why: "The card issuer rejected the charge",
+ *                 fix: "Ask the customer for another card" },
+ *     limit: ({ plan }: { plan: string }) => ({ status: 429, message: `Plan ${plan} limit reached` }),
+ *   });
+ *   throw billingErrors.limit({ plan: "free" });   // code "billing.limit"
+ *
+ * A code groups every occurrence into one issue (scheme "code-v1"), so codes
+ * must be stable, namespaced and low-cardinality: never ids, user data or
+ * secrets. Anything not matching CODE_PATTERN is dropped and the error
+ * groups by message exactly as before.
+ */
+/** `namespace.key` with up to four segments, lower-case, max 80 characters. */
+declare const CODE_PATTERN: RegExp;
+interface RuntimeErrorDefinition {
+    /** Human-readable message. Safe to show to clients. */
+    message: string;
+    /** HTTP-ish status. Default 500 when the error reaches a response. */
+    status?: number;
+    /** Expected business failure (decline, validation): recorded, never an incident. */
+    expected?: boolean;
+    /** Declared cause, ≤ 1000 chars. Treated as a hypothesis by Autter's RCA. */
+    why?: string;
+    /** Declared remedy, ≤ 1000 chars. */
+    fix?: string;
+    /** Docs link, ≤ 500 chars. */
+    link?: string;
+}
+interface RuntimeErrorExtras {
+    /** Underlying error; becomes `exception.cause.N.*` (max 5 levels). */
+    cause?: unknown;
+    /** Debug-only details: redacted and attached to the span only, never to logs or client responses. */
+    internal?: Record<string, unknown>;
+    /** Override the catalog message for this throw. */
+    message?: string;
+}
+interface RuntimeErrorOptions extends RuntimeErrorDefinition {
+    /** Stable namespaced code, e.g. "inventory.reservation_timeout". */
+    code?: string;
+    /** Underlying error; becomes `exception.cause.N.*` (max 5 levels). */
+    cause?: unknown;
+    /** Debug-only details: redacted and attached to the span only, never to logs or client responses. */
+    internal?: Record<string, unknown>;
+}
+/** The fields Autter reads from any error (duck-typed). */
+interface RuntimeErrorLike {
+    message?: string;
+    code?: string;
+    why?: string;
+    fix?: string;
+    link?: string;
+    status?: number;
+    expected?: boolean;
+}
+declare class RuntimeError extends Error implements RuntimeErrorLike {
+    readonly code?: string;
+    readonly why?: string;
+    readonly fix?: string;
+    readonly link?: string;
+    readonly status?: number;
+    readonly expected?: boolean;
+    /** Non-enumerable so JSON.stringify / loggers never serialise it. */
+    readonly internal?: Record<string, unknown>;
+    constructor(options: RuntimeErrorOptions | string);
+    /** Client-safe JSON (what `toClientError` returns, minus the wrapper). */
+    toJSON(): Record<string, unknown>;
+}
+type CatalogEntry = RuntimeErrorDefinition | ((args: any) => RuntimeErrorDefinition);
+/** A typed factory for one catalog entry; `.code` is the namespaced code. */
+type RuntimeErrorFactory<E> = E extends (args: infer A) => RuntimeErrorDefinition ? ((args: A, extras?: RuntimeErrorExtras) => RuntimeError) & {
+    readonly code: string;
+} : ((extras?: RuntimeErrorExtras) => RuntimeError) & {
+    readonly code: string;
+};
+type RuntimeErrorCatalog<C extends Record<string, CatalogEntry>> = {
+    readonly [K in keyof C]: RuntimeErrorFactory<C[K]>;
+};
+/**
+ * Build typed error factories from a catalog. Each key becomes the code
+ * `${namespace}.${key}`; an invalid resulting code is dropped with a
+ * one-time warning (the factory still produces a normal RuntimeError).
+ */
+declare function defineRuntimeErrors<const C extends Record<string, CatalogEntry>>(namespace: string, catalog: C): RuntimeErrorCatalog<C>;
+/**
+ * True for any error carrying Autter's structured fields — a RuntimeError,
+ * or ANY object with a string `code`/`why`/`fix`/`link`, a numeric `status`
+ * (or `statusCode`) or a boolean `expected`. Existing error classes benefit
+ * without being rewritten.
+ */
+declare function isRuntimeErrorLike(err: unknown): err is RuntimeErrorLike;
+interface ErrorAttributeOptions {
+    /** Also emit `exception.cause.N.*` for the cause chain (default true). */
+    causes?: boolean;
+}
+/**
+ * Wire attributes for an error: `autter.error.code|why|fix|link|status|expected`
+ * and `exception.cause.N.type|message|code` (N = 1..5). Never includes
+ * `internal` — see `errorInternal`.
+ */
+declare function errorAttributes(err: unknown, options?: ErrorAttributeOptions): Record<string, string | number | boolean>;
+interface ClientErrorBody {
+    error: {
+        message: string;
+        code?: string;
+        why?: string;
+        fix?: string;
+        link?: string;
+        requestId?: string;
+    };
+}
+/**
+ * Client-safe JSON body for an error:
+ * `{ error: { message, code?, why?, fix?, link?, requestId? } }`.
+ * Never includes `internal`, stacks or causes. The message of an
+ * unstructured 5xx error (a plain `throw new Error(...)`) is replaced with a
+ * generic one, because it was never written for clients.
+ */
+declare function toClientError(err: unknown, requestId?: string): ClientErrorBody;
+
+/**
+ * One runtime record before it is encoded for any sink: an operation or
+ * request summary (`autter.event.type = "operation"`) or a plain log line.
+ * `attributes` are already redacted and bounded.
+ */
+interface RuntimeEvent {
+    /** Epoch milliseconds. */
+    time: number;
+    level: RuntimeLogLevel;
+    message: string;
+    attributes: RuntimeLogContext;
+    traceId?: string;
+    spanId?: string;
+}
+
+/**
+ * Serialisable link from a producer operation to work it hands off (a queue
+ * job, another process): `{ v: 1, op, req?, traceparent? }`. Put it in the
+ * job payload; the consumer passes it as `withRuntimeOperation(..., { from })`.
+ */
+interface RuntimeCarrier {
+    v: 1;
+    /** Producer operation id (becomes the consumer's `autter.operation.parent_id`). */
+    op: string;
+    /** Request id the work belongs to. */
+    req?: string;
+    /** W3C traceparent of the producer span (consumer links to it). */
+    traceparent?: string;
+}
+
+/**
+ * Where runtime records go. The logger pipeline is
+ * `enrich → redact/bound → sinks[]`; each sink receives the same immutable
+ * RuntimeEvent. Defaults: `[otlpSink(), consoleSink()]` (+ `fileSink()` when
+ * NODE_ENV=development). Sinks must never throw into application code.
+ */
+interface RuntimeSink {
+    readonly name: string;
+    /** Called when the logger is (re)configured; null before init. */
+    start?(context: RuntimeSinkContext): void;
+    write(event: RuntimeEvent): void;
+    flush?(): Promise<void>;
+    shutdown?(): Promise<void>;
+    /** Records held in memory awaiting delivery. */
+    buffered?(): number;
+    /** @internal Receives every captureException call (testing sinks). */
+    exception?(record: CapturedException): void;
+}
+interface RuntimeSinkContext {
+    endpoint: string;
+    apiKey: string;
+    service: string;
+    environment: string;
+    release?: string;
+    /** SDK identity for the `telemetry.distro.*` resource attributes. */
+    distro?: {
+        name: string;
+        version: string;
+    };
+}
+interface CapturedException {
+    time: number;
+    error: unknown;
+    message: string;
+    type: string;
+    attributes: Record<string, unknown>;
+    operationId?: string;
+    requestId?: string;
+}
+interface OtlpSinkOptions {
+    /** Override the ingester base URL (default: the configured endpoint). */
+    endpoint?: string;
+    /** Override the ingest key (default: the configured apiKey). */
+    apiKey?: string;
+}
+/**
+ * OTLP/HTTP JSON export to `${endpoint}/v1/logs`. Bounded exactly like
+ * 1.4.0: 1000 records / 4 MiB buffered, 256 KiB per record, batches of 50
+ * (≤ 512 KiB), 3 attempts within a 10 s deadline, exponential back-off
+ * on failure, undelivered records reported at shutdown.
+ */
+declare function otlpSink(options?: OtlpSinkOptions): RuntimeSink;
+interface ConsoleSinkOptions {
+    /** Default: "pretty" unless NODE_ENV === "production", then "json". */
+    format?: "pretty" | "json";
+    /** Colourise pretty output. Default: stdout is a TTY and NO_COLOR is unset. */
+    color?: boolean;
+    /** Line writer. Default console.log. */
+    write?: (line: string) => void;
+}
+/**
+ * Console output. JSON lines (identical to 1.4.0) in production; a compact
+ * human-readable tree elsewhere, coloured only on a TTY.
+ */
+declare function consoleSink(options?: ConsoleSinkOptions): RuntimeSink;
+interface FileSinkOptions {
+    /** Directory for `YYYY-MM-DD.jsonl` files. Default ".autter/runtime" (cwd-relative). */
+    dir?: string;
+    /** Keep at most this many files (oldest deleted). Default 7. */
+    maxFiles?: number;
+    /** Start a new `YYYY-MM-DD.N.jsonl` file past this size. Default 10 MiB. */
+    maxBytes?: number;
+}
+/**
+ * NDJSON on local disk, one record per line, for coding agents and
+ * `autter logs --local`. Daily files (UTC), size rotation, bounded file
+ * count. Writes are synchronous appends (dev-sized volumes). Disables itself
+ * with one warning on read-only or permission-denied filesystems.
+ */
+declare function fileSink(options?: FileSinkOptions): RuntimeSink;
+interface MemorySink extends RuntimeSink {
+    readonly events: RuntimeEvent[];
+    readonly exceptions: CapturedException[];
+    clear(): void;
+}
+/** Keeps every record in memory — for tests (`@autter/runtime-node/testing`). */
+declare function memorySink(): MemorySink;
+
+export { otlpSink as A, redactAttributes as B, type CapturedException as C, redactText as D, toClientError as E, type FileSinkOptions as F, type MemorySink as M, type OtlpSinkOptions as O, type RuntimeEvent as R, type RuntimeOutcome as a, type RedactOptions as b, type Redactor$1 as c, type RuntimeLogLevel as d, type RuntimeOperationKind as e, type RuntimeSink as f, type RuntimeLogContext as g, type RuntimeCarrier as h, CODE_PATTERN as i, type ClientErrorBody as j, type ConsoleSinkOptions as k, RuntimeError as l, memorySink as m, type RuntimeErrorCatalog as n, type RuntimeErrorDefinition as o, type RuntimeErrorExtras as p, type RuntimeErrorFactory as q, type RuntimeErrorLike as r, type RuntimeErrorOptions as s, type RuntimeLogContextValue as t, type RuntimeSinkContext as u, consoleSink as v, defineRuntimeErrors as w, errorAttributes as x, fileSink as y, isRuntimeErrorLike as z };

package/dist/sinks-RFV76lF1.d.ts

@@ -0,0 +1,313 @@
+/**
+ * Structural copy of OpenTelemetry's `Attributes` so runtime-core stays
+ * dependency-free (it is bundled into the zero-dependency edge package).
+ * Assignable both ways with `@opentelemetry/api`'s type.
+ */
+type AttributeValue = string | number | boolean | Array<null | undefined | string> | Array<null | undefined | number> | Array<null | undefined | boolean>;
+type Attributes = Record<string, AttributeValue | undefined>;
+
+interface RedactOptions {
+    /**
+     * Extra patterns matched against lower-cased attribute KEYS; a match
+     * masks the whole value. Strings become case-insensitive substring
+     * patterns. Extends the built-in list.
+     */
+    additionalKeyPatterns?: (RegExp | string)[];
+    /**
+     * Extra patterns scrubbed inside string VALUES — attribute values,
+     * exception messages, stack traces, span status messages, URLs, log
+     * lines. Strings are compiled as case-insensitive regex sources. Every
+     * pattern is applied globally. Extends the built-in list.
+     */
+    additionalValuePatterns?: (RegExp | string)[];
+    /** Replacement token. Default "[redacted]". */
+    mask?: string;
+    /**
+     * Scrub email-shaped substrings from ALL string values, not just
+     * sensitive keys. Default true.
+     */
+    scrubEmailValues?: boolean;
+    /**
+     * Scrub Luhn-valid payment card numbers from all string values.
+     * Default true.
+     */
+    scrubCardNumbers?: boolean;
+}
+/**
+ * Return a copy of `attributes` with PII/secrets masked. Never mutates the
+ * input; non-string primitives pass through untouched; `undefined` values
+ * are dropped (OpenTelemetry rejects them).
+ */
+declare function redactAttributes(attributes?: Attributes | null, options?: RedactOptions): Attributes;
+/**
+ * Scrub secrets/PII embedded in one string — an error message, a stack
+ * trace, a URL, a log line. Same value patterns as redactAttributes().
+ */
+declare function redactText(text: string, options?: RedactOptions): string;
+/** A compiled redactor: callable for attribute bags, plus string and
+ * export-time helpers. */
+interface Redactor$1 {
+    (attributes?: Attributes | null): Attributes;
+    /** Scrub one string (messages, stacks, URLs). Identity when disabled. */
+    text(value: string): string;
+    /**
+     * Export-time pass over attributes already on a span (set by any
+     * instrumentation, not just Autter's capture calls). Strings are
+     * value-scrubbed, string values under sensitive KEYS are masked, and
+     * numbers/booleans pass untouched — usage counters such as
+     * `ai.usage.promptTokens` must survive for cost tracking.
+     */
+    exported(attributes: Attributes): Attributes;
+    readonly enabled: boolean;
+}
+
+type RuntimeLogContextValue = string | number | boolean | null | undefined | RuntimeLogContextValue[] | {
+    [key: string]: RuntimeLogContextValue;
+};
+type RuntimeLogContext = Record<string, RuntimeLogContextValue>;
+type RuntimeLogLevel = "debug" | "info" | "warning" | "error";
+type RuntimeOutcome = "succeeded" | "failed" | "degraded" | "cancelled" | "pending";
+type RuntimeOperationKind = "request" | "operation";
+
+/**
+ * Structured, coded errors shared by every Autter Runtime server SDK.
+ *
+ *   export const billingErrors = defineRuntimeErrors("billing", {
+ *     declined: { status: 402, message: "Payment declined", expected: true,
+ *                 why: "The card issuer rejected the charge",
+ *                 fix: "Ask the customer for another card" },
+ *     limit: ({ plan }: { plan: string }) => ({ status: 429, message: `Plan ${plan} limit reached` }),
+ *   });
+ *   throw billingErrors.limit({ plan: "free" });   // code "billing.limit"
+ *
+ * A code groups every occurrence into one issue (scheme "code-v1"), so codes
+ * must be stable, namespaced and low-cardinality: never ids, user data or
+ * secrets. Anything not matching CODE_PATTERN is dropped and the error
+ * groups by message exactly as before.
+ */
+/** `namespace.key` with up to four segments, lower-case, max 80 characters. */
+declare const CODE_PATTERN: RegExp;
+interface RuntimeErrorDefinition {
+    /** Human-readable message. Safe to show to clients. */
+    message: string;
+    /** HTTP-ish status. Default 500 when the error reaches a response. */
+    status?: number;
+    /** Expected business failure (decline, validation): recorded, never an incident. */
+    expected?: boolean;
+    /** Declared cause, ≤ 1000 chars. Treated as a hypothesis by Autter's RCA. */
+    why?: string;
+    /** Declared remedy, ≤ 1000 chars. */
+    fix?: string;
+    /** Docs link, ≤ 500 chars. */
+    link?: string;
+}
+interface RuntimeErrorExtras {
+    /** Underlying error; becomes `exception.cause.N.*` (max 5 levels). */
+    cause?: unknown;
+    /** Debug-only details: redacted and attached to the span only, never to logs or client responses. */
+    internal?: Record<string, unknown>;
+    /** Override the catalog message for this throw. */
+    message?: string;
+}
+interface RuntimeErrorOptions extends RuntimeErrorDefinition {
+    /** Stable namespaced code, e.g. "inventory.reservation_timeout". */
+    code?: string;
+    /** Underlying error; becomes `exception.cause.N.*` (max 5 levels). */
+    cause?: unknown;
+    /** Debug-only details: redacted and attached to the span only, never to logs or client responses. */
+    internal?: Record<string, unknown>;
+}
+/** The fields Autter reads from any error (duck-typed). */
+interface RuntimeErrorLike {
+    message?: string;
+    code?: string;
+    why?: string;
+    fix?: string;
+    link?: string;
+    status?: number;
+    expected?: boolean;
+}
+declare class RuntimeError extends Error implements RuntimeErrorLike {
+    readonly code?: string;
+    readonly why?: string;
+    readonly fix?: string;
+    readonly link?: string;
+    readonly status?: number;
+    readonly expected?: boolean;
+    /** Non-enumerable so JSON.stringify / loggers never serialise it. */
+    readonly internal?: Record<string, unknown>;
+    constructor(options: RuntimeErrorOptions | string);
+    /** Client-safe JSON (what `toClientError` returns, minus the wrapper). */
+    toJSON(): Record<string, unknown>;
+}
+type CatalogEntry = RuntimeErrorDefinition | ((args: any) => RuntimeErrorDefinition);
+/** A typed factory for one catalog entry; `.code` is the namespaced code. */
+type RuntimeErrorFactory<E> = E extends (args: infer A) => RuntimeErrorDefinition ? ((args: A, extras?: RuntimeErrorExtras) => RuntimeError) & {
+    readonly code: string;
+} : ((extras?: RuntimeErrorExtras) => RuntimeError) & {
+    readonly code: string;
+};
+type RuntimeErrorCatalog<C extends Record<string, CatalogEntry>> = {
+    readonly [K in keyof C]: RuntimeErrorFactory<C[K]>;
+};
+/**
+ * Build typed error factories from a catalog. Each key becomes the code
+ * `${namespace}.${key}`; an invalid resulting code is dropped with a
+ * one-time warning (the factory still produces a normal RuntimeError).
+ */
+declare function defineRuntimeErrors<const C extends Record<string, CatalogEntry>>(namespace: string, catalog: C): RuntimeErrorCatalog<C>;
+/**
+ * True for any error carrying Autter's structured fields — a RuntimeError,
+ * or ANY object with a string `code`/`why`/`fix`/`link`, a numeric `status`
+ * (or `statusCode`) or a boolean `expected`. Existing error classes benefit
+ * without being rewritten.
+ */
+declare function isRuntimeErrorLike(err: unknown): err is RuntimeErrorLike;
+interface ErrorAttributeOptions {
+    /** Also emit `exception.cause.N.*` for the cause chain (default true). */
+    causes?: boolean;
+}
+/**
+ * Wire attributes for an error: `autter.error.code|why|fix|link|status|expected`
+ * and `exception.cause.N.type|message|code` (N = 1..5). Never includes
+ * `internal` — see `errorInternal`.
+ */
+declare function errorAttributes(err: unknown, options?: ErrorAttributeOptions): Record<string, string | number | boolean>;
+interface ClientErrorBody {
+    error: {
+        message: string;
+        code?: string;
+        why?: string;
+        fix?: string;
+        link?: string;
+        requestId?: string;
+    };
+}
+/**
+ * Client-safe JSON body for an error:
+ * `{ error: { message, code?, why?, fix?, link?, requestId? } }`.
+ * Never includes `internal`, stacks or causes. The message of an
+ * unstructured 5xx error (a plain `throw new Error(...)`) is replaced with a
+ * generic one, because it was never written for clients.
+ */
+declare function toClientError(err: unknown, requestId?: string): ClientErrorBody;
+
+/**
+ * One runtime record before it is encoded for any sink: an operation or
+ * request summary (`autter.event.type = "operation"`) or a plain log line.
+ * `attributes` are already redacted and bounded.
+ */
+interface RuntimeEvent {
+    /** Epoch milliseconds. */
+    time: number;
+    level: RuntimeLogLevel;
+    message: string;
+    attributes: RuntimeLogContext;
+    traceId?: string;
+    spanId?: string;
+}
+
+/**
+ * Serialisable link from a producer operation to work it hands off (a queue
+ * job, another process): `{ v: 1, op, req?, traceparent? }`. Put it in the
+ * job payload; the consumer passes it as `withRuntimeOperation(..., { from })`.
+ */
+interface RuntimeCarrier {
+    v: 1;
+    /** Producer operation id (becomes the consumer's `autter.operation.parent_id`). */
+    op: string;
+    /** Request id the work belongs to. */
+    req?: string;
+    /** W3C traceparent of the producer span (consumer links to it). */
+    traceparent?: string;
+}
+
+/**
+ * Where runtime records go. The logger pipeline is
+ * `enrich → redact/bound → sinks[]`; each sink receives the same immutable
+ * RuntimeEvent. Defaults: `[otlpSink(), consoleSink()]` (+ `fileSink()` when
+ * NODE_ENV=development). Sinks must never throw into application code.
+ */
+interface RuntimeSink {
+    readonly name: string;
+    /** Called when the logger is (re)configured; null before init. */
+    start?(context: RuntimeSinkContext): void;
+    write(event: RuntimeEvent): void;
+    flush?(): Promise<void>;
+    shutdown?(): Promise<void>;
+    /** Records held in memory awaiting delivery. */
+    buffered?(): number;
+    /** @internal Receives every captureException call (testing sinks). */
+    exception?(record: CapturedException): void;
+}
+interface RuntimeSinkContext {
+    endpoint: string;
+    apiKey: string;
+    service: string;
+    environment: string;
+    release?: string;
+    /** SDK identity for the `telemetry.distro.*` resource attributes. */
+    distro?: {
+        name: string;
+        version: string;
+    };
+}
+interface CapturedException {
+    time: number;
+    error: unknown;
+    message: string;
+    type: string;
+    attributes: Record<string, unknown>;
+    operationId?: string;
+    requestId?: string;
+}
+interface OtlpSinkOptions {
+    /** Override the ingester base URL (default: the configured endpoint). */
+    endpoint?: string;
+    /** Override the ingest key (default: the configured apiKey). */
+    apiKey?: string;
+}
+/**
+ * OTLP/HTTP JSON export to `${endpoint}/v1/logs`. Bounded exactly like
+ * 1.4.0: 1000 records / 4 MiB buffered, 256 KiB per record, batches of 50
+ * (≤ 512 KiB), 3 attempts within a 10 s deadline, exponential back-off
+ * on failure, undelivered records reported at shutdown.
+ */
+declare function otlpSink(options?: OtlpSinkOptions): RuntimeSink;
+interface ConsoleSinkOptions {
+    /** Default: "pretty" unless NODE_ENV === "production", then "json". */
+    format?: "pretty" | "json";
+    /** Colourise pretty output. Default: stdout is a TTY and NO_COLOR is unset. */
+    color?: boolean;
+    /** Line writer. Default console.log. */
+    write?: (line: string) => void;
+}
+/**
+ * Console output. JSON lines (identical to 1.4.0) in production; a compact
+ * human-readable tree elsewhere, coloured only on a TTY.
+ */
+declare function consoleSink(options?: ConsoleSinkOptions): RuntimeSink;
+interface FileSinkOptions {
+    /** Directory for `YYYY-MM-DD.jsonl` files. Default ".autter/runtime" (cwd-relative). */
+    dir?: string;
+    /** Keep at most this many files (oldest deleted). Default 7. */
+    maxFiles?: number;
+    /** Start a new `YYYY-MM-DD.N.jsonl` file past this size. Default 10 MiB. */
+    maxBytes?: number;
+}
+/**
+ * NDJSON on local disk, one record per line, for coding agents and
+ * `autter logs --local`. Daily files (UTC), size rotation, bounded file
+ * count. Writes are synchronous appends (dev-sized volumes). Disables itself
+ * with one warning on read-only or permission-denied filesystems.
+ */
+declare function fileSink(options?: FileSinkOptions): RuntimeSink;
+interface MemorySink extends RuntimeSink {
+    readonly events: RuntimeEvent[];
+    readonly exceptions: CapturedException[];
+    clear(): void;
+}
+/** Keeps every record in memory — for tests (`@autter/runtime-node/testing`). */
+declare function memorySink(): MemorySink;
+
+export { otlpSink as A, redactAttributes as B, type CapturedException as C, redactText as D, toClientError as E, type FileSinkOptions as F, type MemorySink as M, type OtlpSinkOptions as O, type RuntimeEvent as R, type RuntimeOutcome as a, type RedactOptions as b, type Redactor$1 as c, type RuntimeLogLevel as d, type RuntimeOperationKind as e, type RuntimeSink as f, type RuntimeLogContext as g, type RuntimeCarrier as h, CODE_PATTERN as i, type ClientErrorBody as j, type ConsoleSinkOptions as k, RuntimeError as l, memorySink as m, type RuntimeErrorCatalog as n, type RuntimeErrorDefinition as o, type RuntimeErrorExtras as p, type RuntimeErrorFactory as q, type RuntimeErrorLike as r, type RuntimeErrorOptions as s, type RuntimeLogContextValue as t, type RuntimeSinkContext as u, consoleSink as v, defineRuntimeErrors as w, errorAttributes as x, fileSink as y, isRuntimeErrorLike as z };