export declare function verifyWechatCallbackSignature(token: string, signature: string, timestamp: string, nonce: string, encrypted?: string): boolean;
export interface DecryptedWechatCallback {
    xml: string;
    receiveId: string;
}
export declare function decryptWechatCallback(encryptedBase64: string, encodingAesKey: string): DecryptedWechatCallback;
export declare function decryptWechatCallbackFor(encryptedBase64: string, encodingAesKey: string, expectedReceiveId: string): string;
export declare function extractWechatEncryptedPayload(xml: string): string | undefined;
/** 解析微信回调的一层标量 XML；不执行实体展开，避免 XML 外部实体风险。 */
export declare function parseWechatXml(xml: string): Record<string, string | number>;