/**
 * @module @arcis/node/sanitizers/deserialization
 *
 * V33 — Modern deserialization marker detection (improvements.md §1.2).
 *
 * Detect input that LOOKS like a serialized-object payload for
 * runtimes where deserialization equals code execution: Python
 * pickle, Java FastJSON, PHP unserialize, Ruby Marshal, .NET
 * BinaryFormatter.
 *
 * Detection-only — the right response to a hit is "refuse the
 * request" not "strip the bytes and pass through" (a forgiving
 * parser might still deserialize the remainder to something
 * dangerous). Caller decides.
 *
 * Mirrors `arcis-python/arcis/sanitizers/deserialization.py`. Both
 * SDKs must accept the same base corpus per Pattern 7.
 */
export type DeserializeRuntime = 'python_pickle' | 'java_fastjson' | 'php_unserialize' | 'ruby_marshal' | 'dotnet_binary_formatter';
/**
 * Detect a serialized-object marker for any known runtime.
 *
 * Returns the runtime tag if a marker matches, or null if the input
 * looks safe. Precedence: head-byte markers (pickle / Ruby / .NET)
 * before embedded markers (FastJSON / PHP).
 */
export declare function detectDeserialization(payload: string): DeserializeRuntime | null;
/** Convenience boolean wrapper around `detectDeserialization`. */
export declare function isSerializedPayload(payload: string): boolean;
//# sourceMappingURL=deserialization.d.ts.map