/**
 * Actions exposed for the data-programs primitive: save/preview/run/list/get/
 * delete. Mirrors the repo's `defineAction` conventions (see
 * `../mcp/actions/create-org-service-token.ts`, `../sharing/actions/*`).
 *
 * Security: every action that EXECUTES code (save — which dry-runs before
 * persisting — preview, run) or MUTATES stored code (delete) is
 * `toolCallable: false`, so the sandboxed tools-iframe bridge can never
 * invoke stored/arbitrary code under the opener's session — the same
 * rationale as `provider-api-request`. `list`/`get` are read-only and
 * access-scoped through the sharing helpers.
 */
import type { ActionEntry } from "../agent/production-agent.js";
export interface CreateDataProgramActionsOptions {
    appId: string;
    getActions: () => Record<string, ActionEntry>;
}
export declare function createDataProgramActions(options: CreateDataProgramActionsOptions): Record<string, ActionEntry>;
//# sourceMappingURL=actions.d.ts.map