/**
 * Strips elements unrelated to visual styling (script, iframe, form controls,
 * event handlers, javascript: URLs) while keeping all formatting markup
 * (bold, italic, colour, headings, lists, links, etc.).
 *
 * Falls back to returning the raw string in SSR environments where document
 * is not available.
 */
export declare function sanitizeHtml(html: string): string;
/** HTML-escapes a plain-text value for safe interpolation inside an HTML template. */
export declare function escapeHtml(value: string): string;
/**
 * Replaces {{groupName.fieldName}} placeholders with HTML-escaped values
 * from the flat FormValues map, then sanitizes the resulting HTML.
 */
export declare function replacePlaceholders(template: string, values: Record<string, unknown>): string;