/** The static page a caller should host (with a `script-src 'unsafe-eval'` CSP scoped to that path) for genuine strict-CSP compatibility — see this module's doc comment. */
export declare function sandboxHtml(): string;
/**
 * Evaluates `source` (a `new Function(source)` body, no params) inside the
 * sandbox iframe and returns its result. Pass `sandboxUrl` for genuine
 * strict-CSP compatibility (see this module's doc comment) — without it,
 * this still isolates the code's execution context but does not itself
 * regain `unsafe-eval` under a CSP that already forbids it.
 */
export declare function evaluateInSandbox(source: string, sandboxUrl?: string): Promise<unknown>;
/**
 * The sandboxed counterpart to `compileFullJsAccessorBlock` — same
 * strip-export/collect-names transform, but the actual `new Function`
 * evaluation happens in the iframe rather than the main page. Async,
 * unlike its synchronous counterpart, for the reasons in this module's doc
 * comment.
 */
export declare function compileFullJsAccessorBlockInSandbox(blockText: string, sandboxUrl?: string): Promise<Record<string, unknown>>;
/** Tears down the sandbox iframe — mainly for tests/dev cleanup, not needed in normal page-lifetime usage. */
export declare function destroySandbox(): void;