/**
 * Reading structure out of AOT XML without a sanitising `replace()`.
 *
 * The tempting one-liner is `xml.replace(/<!--[\s\S]*?-->/g, '')` and then a
 * regex for the element you want. It is wrong twice over. A single pass leaves
 * an UNTERMINATED `<!--` in place, so the very next match can read markup out of
 * a comment — the identity of an object, say — and CodeQL flags it as
 * `js/incomplete-multi-character-sanitization`. This repo has now paid for that
 * shape twice: once in the eval oracle's `aotRootElement` (commit 228fb58) and
 * once in the write-path guards that borrowed its idea but not its fix.
 *
 * So there is no sanitizer here. The document is walked TOKEN BY TOKEN with the
 * skippable forms first, which cannot leave a stray delimiter behind:
 *
 *   comment · CDATA · processing instruction · doctype · element
 *
 * The unterminated branches are load-bearing, not defensive padding. Without
 * them the scan fails to match at the `<!--`, advances one character, and
 * matches an element INSIDE the comment — the bug being fixed. Consuming to end
 * of input instead ends the scan, so a document whose remainder is commented out
 * yields nothing after that point, which is the honest answer.
 */
/**
 * A private token scanner over the same grammar, for callers that need the raw
 * token stream rather than leaves — element ORDER, for instance, which no XML
 * object model in this repo preserves.
 *
 * Each caller gets its own RegExp: a module-level one carries `lastIndex`
 * between calls, so two scans that interleave (a nested walk, a generator the
 * caller stops early) would silently skip half a document.
 */
export declare function createXmlTokenScanner(): RegExp;
/** A leaf element: one with text content and no child element. */
export interface XmlLeaf {
    name: string;
    /** Raw text between the tags, untrimmed. */
    text: string;
    /** 1 for a child of the root element, 2 for its grandchildren, and so on. */
    depth: number;
}
/**
 * Every leaf element carrying text, in document order, with its nesting depth.
 *
 * CDATA is consumed whole, so the `<` characters inside an X++ `<Declaration>`
 * never look like markup and never disturb the depth count.
 */
export declare function scanXmlLeaves(xml: string): XmlLeaf[];
/** The text of the first leaf with this name at this depth, or undefined. */
export declare function firstLeafText(xml: string, name: string, depth?: number): string | undefined;
//# sourceMappingURL=xmlScan.d.ts.map