/**
 * log10x_datadog_spike_audit: the account's log spikes over a lookback, read
 * from Datadog's estimated usage metrics with the org's own keys, priced at
 * its rates, with what a fleet default limit would have held. Needs no 10x
 * install. Every request is a GET to Datadog's metrics query API.
 */
import { z } from 'zod';
import { type DatadogMetricsCreds } from '../lib/datadog-metrics-read.js';
import { type ChassisEnvelope } from '../lib/chassis-envelope.js';
export declare const EVENTS_QUERY = "sum:datadog.estimated_usage.logs.ingested_events{datadog_is_excluded:false} by {service,datadog_index}.as_count().rollup(sum, 3600)";
export declare const BYTES_QUERY = "sum:datadog.estimated_usage.logs.ingested_bytes{*} by {service}.as_count().rollup(sum, 3600)";
export declare const datadogSpikeAuditSchema: {
    view: z.ZodDefault<z.ZodEnum<{
        summary: "summary";
        markdown: "markdown";
    }>>;
    lookback: z.ZodDefault<z.ZodString>;
    standard_rate_per_million: z.ZodOptional<z.ZodNumber>;
    ingestion_rate_per_gb: z.ZodOptional<z.ZodNumber>;
    spike_multiplier: z.ZodDefault<z.ZodNumber>;
    headroom: z.ZodDefault<z.ZodNumber>;
    limit: z.ZodDefault<z.ZodNumber>;
    site: z.ZodOptional<z.ZodString>;
    budget_usd_monthly: z.ZodOptional<z.ZodNumber>;
    standard_indexes: z.ZodOptional<z.ZodArray<z.ZodString>>;
};
export interface DatadogSpikeAuditArgs {
    view?: 'markdown' | 'summary';
    lookback?: string;
    standard_rate_per_million?: number;
    ingestion_rate_per_gb?: number;
    spike_multiplier?: number;
    headroom?: number;
    limit?: number;
    site?: string;
    budget_usd_monthly?: number;
    standard_indexes?: string[];
}
export interface SpikeAuditDeps {
    /** Datadog keys. Undefined reads DD_API_KEY / DD_APP_KEY / DD_SITE; null means none. */
    creds?: DatadogMetricsCreds | null;
    nowMs?: () => number;
}
export declare function executeDatadogSpikeAudit(args: DatadogSpikeAuditArgs, deps?: SpikeAuditDeps): Promise<ChassisEnvelope>;