import { type EventRow, type EventSource } from './EventRow.js';
import type { Attribution } from './CorrelationEngine.js';
export interface NormaliseContext {
    seq: number;
    attribution: Attribution;
    source: EventSource;
}
/**
 * Collapse a batch of Aura actions into one readable line.
 *
 * A single request can carry hundreds of action invocations, and printed raw they bury the
 * timeline. The count alone would not do: the min–max range is the finding. A batch that is
 * uniformly 0ms is fail-fast permission denial — the actor was refused. A batch spread across
 * hundreds of milliseconds is the database being queried, which is the actor getting data.
 * Collapsing to a count would erase the difference between an attempt and a success.
 */
export declare function collapseAuraActions(message: string | undefined): string | undefined;
/**
 * Map one raw row into the unified shape.
 *
 * Every declared column is present on the result, set to `undefined` where the source had
 * nothing. That keeps the CSV header and the row in lockstep — a column that only materialises
 * when populated shifts every value to its left the moment a source omits it.
 */
export declare function normaliseRow(raw: Record<string, unknown>, ctx: NormaliseContext): EventRow;
//# sourceMappingURL=normalise.d.ts.map