/**
 * Safe XML helpers for APS-CF fixtures.
 * Rejects external entity / network-fetching constructs; fixtures are in-memory or local only.
 */
export declare class UnsafeXmlError extends Error {
    readonly code = "UNSAFE_XML";
    constructor(message: string);
}
/**
 * Validate that XML fixture text does not enable XXE / external fetch.
 * Does not parse with a network-capable XML parser.
 */
export declare const assertSafeXmlFixture: (xml: string) => void;
/**
 * Load XML from an in-memory string only (no filesystem egress by default).
 * Callers that need files must read locally themselves and pass the string through this gate.
 */
export declare const loadXmlFixture: (xml: string) => {
    text: string;
    bytes: Uint8Array;
};
/**
 * Reject URLs that would open network egress when loading scenarios.
 */
export declare const assertFixtureLocalPath: (pathOrUrl: string) => void;
//# sourceMappingURL=xml.d.ts.map