/**
 * @fileoverview Graph's signal-envelope assembly (ADR-0011, Phase 5).
 *
 * Collapses a graph run's flat `Signal[]` into the one tool-run
 * {@link SignalEnvelope}: the shared output currency the composition root
 * renders (table), emits (`--json`), and delivers (cloud + `--report-to`).
 *
 * SARIF ruleId decision — Option A (ADR-0011, Phase 5): at envelope assembly
 * each signal's engine slug (`graph:<rule>`) is mapped to its OpenSIP-
 * convention rule ID (`graph.<family>.<rule>`) via
 * {@link mapEngineSlugToOpenSipRuleId}, set on BOTH `ruleId` AND `source`. One
 * canonical id then flows to `--json`, the terminal table (grouped by
 * `signal.source`), and SARIF (`signal.ruleId`). `mapEngineSlugToOpenSipRuleId`
 * stays graph-owned (tool vocabulary does not belong in the tool-agnostic
 * output layer).
 *
 * Fingerprints (ADR-0036): this builder passes `graphFingerprintStrategy`
 * (`ruleId|filePath|line|col`, `baseline-strategy.ts`) to
 * {@link buildSignalEnvelope}, which stamps every signal at construction — so
 * each built envelope (gate, `--json`, cloud, SARIF) is gate-ready, not just
 * the gate path. The strategy is applied AFTER the Option-A `ruleId` remap
 * below, so fingerprints are computed over the canonical (OpenSIP-convention)
 * rule IDs — byte-identical to the prior post-hoc gate-path stamping. The
 * dashboard session payload (`persistence/session-payload.ts`) keeps
 * the engine slug (its metric-column keys are engine slugs).
 *
 * Pure: no IO, no clock, no id generation — `runId`/`createdAt` arrive on the
 * input (formatter-purity contract).
 */
import type { SignalEnvelope } from '@opensip-cli/contracts';
import type { Signal } from '@opensip-cli/core';
/** Inputs to {@link buildGraphEnvelope}. */
export interface BuildGraphEnvelopeInput {
    readonly signals: readonly Signal[];
    readonly recipe?: string;
    readonly runId: string;
    readonly createdAt: string;
    /** Whole-run wall-clock; attributed to each unit row when known (else 0). */
    readonly durationMs?: number;
    readonly resolutionMode?: 'exact' | 'fast';
}
/**
 * Assemble the graph run's {@link SignalEnvelope}.
 *
 * Each signal is remapped to its OpenSIP rule ID (Option A) on both `ruleId`
 * and `source`; signals are then grouped by that mapped source into one
 * {@link UnitResult} per rule that fired (`passed` ⇔ no `critical`/`high` in
 * that group). A rule that emitted no signals produces no unit row — graph's
 * `RunGraphResult` does not carry the full ran-rule set, matching the prior
 * `buildCliOutput` behaviour (one `CheckOutput` per rule that fired).
 */
export declare function buildGraphEnvelope(input: BuildGraphEnvelopeInput): SignalEnvelope;
//# sourceMappingURL=build-envelope.d.ts.map