/**
 * @fileoverview Graph's signal-envelope assembly (ADR-0011, Phase 5).
 *
 * Collapses a graph run's flat `Signal[]` into the one tool-run
 * {@link SignalEnvelope}: the shared output currency the composition root
 * renders (table), emits (`--json`), and delivers (cloud + `--report-to`).
 *
 * SARIF ruleId decision — Option A (ADR-0011, Phase 5): at envelope assembly
 * each signal's engine slug (`graph:<rule>`) is mapped to its OpenSIP-
 * convention rule ID (`graph.<family>.<rule>`) via
 * {@link mapEngineSlugToOpenSipRuleId}, set on BOTH `ruleId` AND `source`. One
 * canonical id then flows to `--json`, the terminal table (grouped by
 * `signal.source`), and SARIF (`signal.ruleId`). `mapEngineSlugToOpenSipRuleId`
 * stays graph-owned (tool vocabulary does not belong in the tool-agnostic
 * output layer).
 *
 * The gate path (`saveBaseline`/`fingerprintSignal`) consumes the raw
 * `result.signals` UPSTREAM of this builder, so its engine-slug fingerprint
 * vocabulary is unaffected (remapping here would churn baselines). The
 * dashboard session payload (`persistence/session-payload.ts`) likewise keeps
 * the engine slug (its metric-column keys are engine slugs).
 *
 * Pure: no IO, no clock, no id generation — `runId`/`createdAt` arrive on the
 * input (formatter-purity contract).
 */
import type { SignalEnvelope } from '@opensip-tools/contracts';
import type { Signal } from '@opensip-tools/core';
/** Inputs to {@link buildGraphEnvelope}. */
export interface BuildGraphEnvelopeInput {
    readonly signals: readonly Signal[];
    readonly recipe?: string;
    readonly runId: string;
    readonly createdAt: string;
    /** Whole-run wall-clock; attributed to each unit row when known (else 0). */
    readonly durationMs?: number;
    readonly resolutionMode?: 'exact' | 'fast';
}
/**
 * Assemble the graph run's {@link SignalEnvelope}.
 *
 * Each signal is remapped to its OpenSIP rule ID (Option A) on both `ruleId`
 * and `source`; signals are then grouped by that mapped source into one
 * {@link UnitResult} per rule that fired (`passed` ⇔ no `critical`/`high` in
 * that group). A rule that emitted no signals produces no unit row — graph's
 * `RunGraphResult` does not carry the full ran-rule set, matching the prior
 * `buildCliOutput` behaviour (one `CheckOutput` per rule that fired).
 */
export declare function buildGraphEnvelope(input: BuildGraphEnvelopeInput): SignalEnvelope;
//# sourceMappingURL=build-envelope.d.ts.map