/**
 * Wrap external/user-supplied content in XML tags to create a clear boundary
 * between system instructions and passive data. Escapes matching closing tags
 * in the content using backslash escaping to prevent breakout.
 *
 * Backslash escaping is preferred over HTML entities for LLM consumption —
 * it prevents tag interpretation while maintaining readability.
 *
 * @see https://github.com/mmnto-ai/totem/issues/149
 * @see https://github.com/mmnto-ai/totem/issues/158
 */
export declare function wrapXml(tag: string, content: string): string;
/**
 * Wrap untrusted external content (PR comments, MCP inputs, GitHub API data)
 * in XML tags with full entity escaping. All `<`, `>`, and `&` characters
 * are escaped to prevent prompt injection breakout.
 *
 * Use this for any content fetched from the network or supplied by external agents.
 * For trusted local content (git diffs), use `wrapXml()` instead.
 */
export declare function wrapUntrustedXml(tag: string, content: string): string;
//# sourceMappingURL=xml-format.d.ts.map