/**
 * Programmatic tool calling (PTC): run sandboxed JS that invokes a subset of agent tools.
 * vm is not a strong security boundary; only trusted models should use this tool.
 */
import type { AgentTool } from '@earendil-works/pi-agent-core';
export declare const SANDBOX_ALLOWED_TOOLS: Set<string>;
export declare function buildSandboxToolMap(tools: AgentTool<any, any>[]): Map<string, AgentTool<any, any>>;
export interface ExecuteCodeToolDeps {
    getSandboxToolMap: () => Map<string, AgentTool<any, any>>;
}
export declare function createExecuteCodeTool(deps: ExecuteCodeToolDeps): AgentTool;