/**
 * Datadog Logs export-plan emitter.
 *
 * Mirrors `lib/siem/datadog.ts`: 24 stratified sub-windows, the same
 * per-bucket cap, the same `index:<name>` + free-text query composition, the
 * same cursor pagination over the v2 logs search endpoint, and the same
 * message resolution — `attributes.message` first, then `message` / `log` /
 * `body` / `raw` under `attributes.attributes`, then the nested attributes
 * as JSON so a custom-format ingest still contributes its bytes.
 *
 * `DD_SITE` selects the regional endpoint (US1/EU1/US3/US5/AP1) exactly as
 * the SDK does, so the script reaches the same host the live connector would.
 */
import { type SamplePlan, type SamplePlanOptions } from './_shared.js';
export declare function emitDatadogPlan(opts: SamplePlanOptions): SamplePlan;