export declare function chLit(value: string): string;
export declare const SECURITY_EVAL_SCOPE_SQL = "(\n  (trace_id IS NOT NULL AND trace_id NOT IN ('', 'null'))\n  OR (session_id IS NOT NULL AND session_id NOT IN ('', 'null'))\n)";
/** application_id + is_redteam + optional created_at bounds (already formatted). */
export declare function buildSecurityDenormWhereSql(applicationId: string, start?: string, end?: string): string;
/** Map plugin_id → top-level risk category label for GROUP BY in ClickHouse. */
export declare function buildPluginCategoryCaseSql(column?: string): string;
export declare function buildSecurityCategoryVolumeSqlDenorm(whereCore: string): string;
export type SecurityVulnerabilitiesBucketConfig = {
    bucketExpression: string;
    rangeStart: string;
    rangeEnd: string;
    fillFromExpr: string;
    fillToExpr: string;
    fillStep: string;
};
/** Pass/fail component counts per time bucket; empty buckets via WITH FILL; percentages in SQL. */
export declare function buildSecurityVulnerabilitiesOverTimeSqlDenorm(whereCore: string, bucket: SecurityVulnerabilitiesBucketConfig): string;
/** Per-plugin probe stats (one row per plugin_id); moderation joined in SQL. */
export declare function buildSecurityTestSuitePluginStatsSqlDenorm(whereCore: string): string;
//# sourceMappingURL=securityQueryHelpers.d.ts.map