sandbox-boundary
Type Aliases
Section titled “Type Aliases”SandboxBindingInput
Section titled “SandboxBindingInput”SandboxBindingInput =
MyceliumJsonValue|undefined
JSON argument or the SDK’s explicit absence of an argument.
SandboxOperationBindings
Section titled “SandboxOperationBindings”SandboxOperationBindings =
Readonly<Record<string,Readonly<Record<string, (input) =>Promise<MyceliumJsonValue>>>>>>>>>>
Host operation callbacks after decoding JSON or an absent RPC argument.
Functions
Section titled “Functions”isSandboxFailure()
Section titled “isSandboxFailure()”isSandboxFailure(
cause):cause is SandboxFailure
Admit only errors constructed by the sandbox owner, using the maintained decoder.
Parameters
Section titled “Parameters”unknown
Returns
Section titled “Returns”cause is SandboxFailure
sandboxFailure()
Section titled “sandboxFailure()”sandboxFailure(
cause):SandboxFailure
Foreign throws stay private until an owner admits a diagnostic.
Parameters
Section titled “Parameters”unknown
Returns
Section titled “Returns”sandboxValueKind()
Section titled “sandboxValueKind()”sandboxValueKind(
value):string
Label a rejected JSON value without caller-owned reflection.
Parameters
Section titled “Parameters”unknown
Returns
Section titled “Returns”string
sandboxBindingInput()
Section titled “sandboxBindingInput()”sandboxBindingInput(
value):SandboxBindingInput
Decode the RPC argument before any capability callback observes it.
Parameters
Section titled “Parameters”unknown
Returns
Section titled “Returns”sandboxOperatorValue()
Section titled “sandboxOperatorValue()”sandboxOperatorValue(
cause):JSONType
Full operator representation, including nested errors, aggregates and cycles.
Parameters
Section titled “Parameters”unknown
Returns
Section titled “Returns”JSONType
sandboxGuestFailure()
Section titled “sandboxGuestFailure()”sandboxGuestFailure(
cause,bindings?):GuestThrew
Decode the engine’s guest-owned diagnostic once; renderers receive typed fields.
Parameters
Section titled “Parameters”unknown
bindings?
Section titled “bindings?”Readonly<Record<string, Readonly<Record<string,
SandboxBinding>>>> = {}
Returns
Section titled “Returns”sandboxTransportMessage()
Section titled “sandboxTransportMessage()”sandboxTransportMessage(
failure,ref):string
Error.message is the SDK’s wire carrier; only this safe, bounded envelope crosses it.
Parameters
Section titled “Parameters”failure
Section titled “failure”string
Returns
Section titled “Returns”string
recoverSandboxFailure()
Section titled “recoverSandboxFailure()”recoverSandboxFailure(
failure,failures):SandboxFailure
Recovery uses the decoded identity, never a match against diagnostic text.
Parameters
Section titled “Parameters”failure
Section titled “failure”failures
Section titled “failures”ReadonlyMap<string, SandboxFailure>
Returns
Section titled “Returns”sandboxExecutorFailure()
Section titled “sandboxExecutorFailure()”sandboxExecutorFailure(
cause,limitMs,elapsedMs):SandboxFailure
Decode Codemode’s documented error carrier before adapters choose a failure.
Parameters
Section titled “Parameters”unknown
limitMs
Section titled “limitMs”number
elapsedMs
Section titled “elapsedMs”number
Returns
Section titled “Returns”sandboxTransportErrno()
Section titled “sandboxTransportErrno()”sandboxTransportErrno(
cause):string|undefined
Decode a transport-owned errno without reflecting on a foreign throw in adapters.
Parameters
Section titled “Parameters”unknown
Returns
Section titled “Returns”string | undefined
sandboxSourceError()
Section titled “sandboxSourceError()”sandboxSourceError(
cause):Readonly<{pos:number; }> |undefined
Admit Acorn’s documented offset from a syntax exception at this boundary.
Parameters
Section titled “Parameters”unknown
Returns
Section titled “Returns”Readonly<{ pos: number; }> | undefined
sandboxCapabilityFailure()
Section titled “sandboxCapabilityFailure()”sandboxCapabilityFailure(
cause,namespace,operation,admitted?):SandboxFailure
Capability owners supply an admission schema; decoding and foreign fallback stay here.
Parameters
Section titled “Parameters”unknown
namespace
Section titled “namespace”string
operation
Section titled “operation”string
admitted?
Section titled “admitted?”ZodType<Readonly<{ kind: "Files" | "Forage" | "InvalidInput" |
"Unavailable" | "OperationFailed"; message: string; }>> = ...
Returns
Section titled “Returns”sandboxBindingBoundary()
Section titled “sandboxBindingBoundary()”sandboxBindingBoundary(
bindings):Readonly<{bindings:SandboxRequest["bindings"];capture: (failure) =>string;recover: (failure) =>SandboxFailure;returnedFailure: (value) =>SandboxFailure|undefined; }>
One boundary owns RPC decoding, safe transport and invocation-scoped recovery.
Parameters
Section titled “Parameters”bindings
Section titled “bindings”Returns
Section titled “Returns”Readonly<{ bindings:
SandboxRequest["bindings"]; capture:
(failure) => string; recover: (failure) =>
SandboxFailure; returnedFailure:
(value) => SandboxFailure |
undefined; }>