@sandbox-kit/sandbox 0.1.0 → 0.1.2

package/dist/client/client.js

@@ -1,390 +1,15 @@
-// Client and sandbox runtime behavior is handwritten. Portable client data
-// contracts come from standard protobuf generation.
-import { create, } from "@bufbuild/protobuf";
-import { pathToString } from "@bufbuild/protobuf/reflect";
-import { durationFromMs } from "@bufbuild/protobuf/wkt";
-import { createValidator } from "@bufbuild/protovalidate";
-import { ConfigSchema, } from "@sandbox-kit/contracts/client";
-import { CreateOptionsSchema, ErrorKind as ProtoErrorKind, } from "@sandbox-kit/contracts/sandbox";
-import { SandboxState, } from "#contracts/sandbox_data_contracts.js";
-import { materializeDurationFields, } from "#internal/duration_ms.js";
-import { metadataObjectFromMap } from "#metadata/metadata_object.js";
-import { protoEnum } from "#internal/proto_enum.js";
+// Client runtime behavior is handwritten. Portable request and response data
+// remain generated from protobuf. This module owns construction and create /
+// attach / get / close; validation, errors, and the Sandbox handle live beside it.
 import { InfoFieldId } from "#contracts/field_paths.js";
-import { ConfigFieldProvider, ConfigFieldTimeout, } from "#contracts/config_paths.js";
-const contractValidator = createValidator({ failFast: true });
-const stableRuleIDs = {
-    "enum.defined_only": "known_enum",
-    "duration.gte": "minimum",
-    "oneof.required": "exactly_one",
-    auth_credentials_required: "exactly_one",
-    cpu_limit: "limit",
-    memory_limit: "limit",
-    cpu_requires_positive: "requires_positive",
-    memory_requires_positive: "requires_positive",
-    restricted_requires_allowlist: "requires_any",
-    block_all_forbids_network: "forbids",
-    allow_all_forbids_allowlists: "forbids",
-    after_requires_duration: "requires_any",
-    after_forbids_duration: "forbids",
-};
-// Ergonomic PascalCase names over protobuf enum values; not a second contract.
-export const ErrorKind = protoEnum(ProtoErrorKind);
-export class SandboxError extends Error {
-    kind;
-    provider;
-    operation;
-    field;
-    rule;
-    statusCode;
-    providerCode;
-    providerSource;
-    constructor(info, options) {
-        super(info.message, options);
-        this.name = "SandboxError";
-        this.kind = info.kind;
-        this.provider = info.provider;
-        this.operation = info.operation;
-        this.field = info.field;
-        this.rule = info.rule;
-        this.statusCode = info.statusCode;
-        this.providerCode = info.providerCode;
-        this.providerSource = info.providerSource;
-    }
-}
-export function sandboxError(info, cause) {
-    return new SandboxError(info, cause === undefined ? undefined : { cause });
-}
-function validationError(provider, operation, field, rule, message) {
-    throw sandboxError({
-        kind: ErrorKind.InvalidArgument,
-        provider,
-        operation,
-        field,
-        rule,
-        message: "sandbox-kit: " + message,
-    });
-}
-function validSecureEndpoint(value) {
-    try {
-        const url = new URL(value);
-        if (!url.hostname || url.username || url.password || url.hash)
-            return false;
-        if (url.protocol === "https:")
-            return true;
-        if (url.protocol !== "http:")
-            return false;
-        const host = url.hostname.toLowerCase();
-        return (host === "localhost" ||
-            host === "[::1]" ||
-            host === "::1" ||
-            /^127(?:\.[0-9]{1,3}){3}$/.test(host));
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Rejects public {@link CreateOptions} the shared contract cannot represent.
- * Materializes wire form privately for Protovalidate. Provider-specific checks
- * remain in each provider adapter.
- */
-export function validateCreateOptions(value, provider = "", operation = "create") {
-    const message = materializeCreateOptions(value);
-    const result = contractValidator.validate(CreateOptionsSchema, message);
-    if (result.kind === "valid") {
-        return;
-    }
-    if (result.kind === "error") {
-        throw sandboxError({
-            kind: ErrorKind.InvalidArgument,
-            provider,
-            operation,
-            field: "",
-            message: "sandbox-kit: invalid configuration",
-        }, result.error);
-    }
-    const violation = result.violations[0];
-    const ruleID = violation.ruleId;
-    let field = pathToString(violation.field);
-    let rule = stableRuleIDs[ruleID] ?? ruleID;
-    if (!field) {
-        field = messageFieldHint(ruleID);
-    }
-    validationError(provider, operation, field, rule, violation.message || "invalid configuration");
-}
-function messageFieldHint(ruleID) {
-    switch (ruleID) {
-        case "cpu_limit":
-        case "cpu_requires_positive":
-            return "resources.cpu_limit_cores";
-        case "memory_limit":
-        case "memory_requires_positive":
-            return "resources.memory_limit_mib";
-        case "restricted_requires_allowlist":
-            return "network.outbound_cidrs,outbound_domains";
-        case "block_all_forbids_network":
-            return "network.outbound_cidrs,outbound_domains,private_network,linked_sandbox,inbound_cidrs,ports";
-        case "allow_all_forbids_allowlists":
-            return "network.outbound_cidrs,outbound_domains";
-        case "after_requires_duration":
-        case "after_forbids_duration":
-            return "after";
-        case "oneof.required":
-            return "tcp_port,command";
-        case "auth_credentials_required":
-            return "api_key,token_pair,bearer_token,oauth_refresh";
-        case "exactly_one":
-            return "client_secret,jwt_key";
-        default:
-            return "";
-    }
-}
-export function validateConfig(value, provider = "", operation = "create") {
-    const message = materializeClientConfig(value);
-    const result = contractValidator.validate(ConfigSchema, message);
-    if (result.kind === "error") {
-        throw sandboxError({
-            kind: ErrorKind.InvalidArgument,
-            provider,
-            operation,
-            field: "",
-            message: "sandbox-kit: invalid configuration",
-        }, result.error);
-    }
-    if (result.kind === "invalid") {
-        const violation = result.violations[0];
-        const ruleID = violation.ruleId;
-        let field = pathToString(violation.field);
-        const rule = stableRuleIDs[ruleID] ?? ruleID;
-        if (!field) {
-            field = messageFieldHint(ruleID);
-        }
-        validationError(provider, operation, field, rule, violation.message || "invalid configuration");
-    }
-    if (message.endpoint !== undefined &&
-        !validSecureEndpoint(message.endpoint)) {
-        validationError(provider, operation, "endpoint", "secure_endpoint", "must use HTTPS except for loopback HTTP development endpoints");
-    }
-}
-function clone(value) {
-    return structuredClone(value);
-}
-function operationSignal(options, inheritedTimeoutMs) {
-    const timeout = options.timeout ?? inheritedTimeoutMs;
-    if (timeout !== undefined && (!Number.isFinite(timeout) || timeout < 0)) {
-        throw sandboxError({
-            kind: ErrorKind.InvalidArgument,
-            provider: "",
-            operation: "",
-            field: ConfigFieldTimeout,
-            message: "sandbox-kit: timeout must be a finite non-negative number",
-        });
-    }
-    if ((timeout === undefined || timeout === 0) && options.signal === undefined)
-        return { dispose() { } };
-    const controller = new AbortController();
-    const abort = () => controller.abort(options.signal?.reason);
-    if (options.signal?.aborted)
-        abort();
-    else
-        options.signal?.addEventListener("abort", abort, { once: true });
-    const timer = timeout !== undefined && timeout > 0
-        ? setTimeout(() => controller.abort(new DOMException("The operation timed out", "TimeoutError")), timeout)
-        : undefined;
-    return {
-        signal: controller.signal,
-        dispose() {
-            if (timer !== undefined)
-                clearTimeout(timer);
-            options.signal?.removeEventListener("abort", abort);
-        },
-    };
-}
-function operationOptions(options, signal) {
-    return {
-        ...(options.timeout === undefined ? {} : { timeout: options.timeout }),
-        ...(signal === undefined ? {} : { signal }),
-    };
-}
-function abortReason(signal) {
-    const reason = signal.reason;
-    return reason instanceof DOMException &&
-        (reason.name === "AbortError" || reason.name === "TimeoutError")
-        ? reason
-        : new DOMException("The operation was aborted", "AbortError");
-}
-async function awaitWithSignal(operation, signal) {
-    if (signal?.aborted)
-        throw abortReason(signal);
-    const pending = operation();
-    if (signal === undefined)
-        return pending;
-    return new Promise((resolve, reject) => {
-        const aborted = () => reject(abortReason(signal));
-        const cleanup = () => signal.removeEventListener("abort", aborted);
-        signal.addEventListener("abort", aborted, { once: true });
-        pending.then((value) => {
-            cleanup();
-            resolve(value);
-        }, (error) => {
-            cleanup();
-            reject(error);
-        });
-    });
-}
-const sandboxConstructorToken = Symbol("sandbox-kit.Sandbox");
-export class Sandbox {
-    #backend;
-    #owner;
-    #timeout;
-    #info;
-    #closed = false;
-    #tail = Promise.resolve();
-    constructor(token, backend, owner, info, timeout) {
-        if (token !== sandboxConstructorToken)
-            throw new TypeError("Sandbox handles are created by Client");
-        this.#backend = backend;
-        this.#owner = owner;
-        this.#info = clone(info);
-        this.#timeout = timeout;
-    }
-    get id() {
-        return this.#info.id;
-    }
-    get providerName() {
-        return this.#info.provider;
-    }
-    info() {
-        return clone(this.#info);
-    }
-    capabilities() {
-        if (this.#closed || this.#owner.isClosed() || this.#info.terminal)
-            return [];
-        return this.#backend.capabilities?.(clone(this.#info)) ?? [];
-    }
-    supports(capability) {
-        return this.capabilities().includes(capability);
-    }
-    async refresh(options = {}) {
-        return this.#serialized("refresh", options, this.#timeout, async (signal) => {
-            const method = this.#backend.refresh;
-            if (!method)
-                unsupported(this.providerName, "refresh");
-            const info = await awaitWithSignal(() => method.call(this.#backend, this.id, operationOptions(options, signal)), signal);
-            this.#info = clone({ ...info, provider: this.providerName });
-            return this.info();
-        });
-    }
-    async start(options = {}) {
-        return this.#update("start", this.#backend.start, wireTimeoutOptions(options), options);
-    }
-    async stop(options = {}) {
-        const { force, ...call } = options;
-        return this.#update("stop", this.#backend.stop, {
-            ...wireTimeoutOptions(call),
-            ...(force === undefined ? {} : { force }),
-        }, call);
-    }
-    async pause(options = {}) {
-        return this.#update("pause", this.#backend.pause, wireTimeoutOptions(options), options);
-    }
-    async terminate(options = {}) {
-        const { wait, ...call } = options;
-        const wire = {
-            ...wireTimeoutOptions(call),
-            ...(wait === undefined ? {} : { wait }),
-        };
-        return this.#serialized("terminate", call, call.timeout ?? this.#timeout, async (signal) => {
-            const method = this.#backend.terminate;
-            if (!method)
-                unsupported(this.providerName, "terminate");
-            const result = await awaitWithSignal(() => method.call(this.#backend, this.id, clone(wire), operationOptions(call, signal)), signal);
-            this.#info = {
-                ...this.#info,
-                state: SandboxState.Terminated,
-                terminal: true,
-            };
-            return result;
-        });
-    }
-    async archive(options = {}) {
-        return this.#update("archive", this.#backend.archive, wireTimeoutOptions(options), options);
-    }
-    async delete(options = {}) {
-        const { wait, ...call } = options;
-        return this.#update("delete", this.#backend.delete, { ...wireTimeoutOptions(call), ...(wait === undefined ? {} : { wait }) }, call);
-    }
-    async close(options = {}) {
-        if (this.#closed)
-            return;
-        await this.#serialized("close", options, this.#timeout, async (signal) => {
-            const close = this.#backend.closeSandbox;
-            if (close)
-                await awaitWithSignal(() => close.call(this.#backend, this.id, operationOptions(options, signal)), signal);
-            this.#closed = true;
-        });
-    }
-    async [Symbol.asyncDispose]() {
-        await this.close();
-    }
-    async #update(operation, method, wire, options) {
-        return this.#serialized(operation, options, options.timeout ?? this.#timeout, async (signal) => {
-            if (!method)
-                unsupported(this.providerName, operation);
-            const info = await awaitWithSignal(() => method.call(this.#backend, this.id, clone(wire), operationOptions(options, signal)), signal);
-            this.#info = clone({ ...info, provider: this.providerName });
-            return this.info();
-        });
-    }
-    async #serialized(operation, options, timeout, body) {
-        this.#ensureOpen(operation);
-        const releaseClient = this.#owner.begin(operation);
-        const previous = this.#tail;
-        let unlock;
-        this.#tail = new Promise((resolve) => {
-            unlock = resolve;
-        });
-        let acquired = false;
-        let scoped;
-        try {
-            scoped = operationSignal(options, timeout);
-            await awaitWithSignal(() => previous, scoped.signal);
-            acquired = true;
-            this.#ensureOpen(operation);
-            return await body(scoped.signal);
-        }
-        catch (error) {
-            throw withContext(error, this.providerName, operation);
-        }
-        finally {
-            scoped?.dispose();
-            if (acquired)
-                unlock();
-            else
-                void previous.then(unlock, unlock);
-            releaseClient();
-        }
-    }
-    #ensureOpen(operation) {
-        if (this.#closed || this.#owner.isClosed())
-            throw sandboxError({
-                kind: ErrorKind.FailedPrecondition,
-                provider: this.providerName,
-                operation,
-                field: "sandbox",
-                message: "sandbox-kit: sandbox handle is closed",
-            });
-        if (operation !== "close" && this.#info.terminal)
-            throw sandboxError({
-                kind: ErrorKind.FailedPrecondition,
-                provider: this.providerName,
-                operation,
-                field: "sandbox",
-                message: "sandbox-kit: sandbox lifecycle is terminal",
-            });
-    }
-}
+import { ConfigFieldProvider } from "#contracts/config_paths.js";
+import { ErrorKind, sandboxError, unsupported, withContext, } from "#client/errors.js";
+import { awaitWithSignal, operationOptions, operationSignal, } from "#client/operation.js";
+import { Sandbox, sandboxConstructorToken, } from "#client/sandbox.js";
+import { validateConfig, validateCreateOptions } from "#client/validation.js";
+export { ErrorKind, SandboxError, sandboxError } from "#client/errors.js";
+export { Sandbox } from "#client/sandbox.js";
+export { validateConfig, validateCreateOptions } from "#client/validation.js";
 export class Client {
     #backend;
     #providerName;
@@ -442,33 +67,21 @@ export class Client {
         return this.#providerName;
     }
     async attach(id, options = {}) {
-        const release = this.#begin("attach");
-        let scoped;
-        try {
-            scoped = operationSignal(options, this.#timeout);
-            if (!id.trim())
-                throw sandboxError({
-                    kind: ErrorKind.InvalidArgument,
-                    provider: this.providerName,
-                    operation: "attach",
-                    field: InfoFieldId,
-                    message: "sandbox-kit: sandbox ID must not be blank",
-                });
+        return this.#openById("attach", id, options, (fetchOptions) => {
             if (!this.#backend.attach)
                 unsupported(this.providerName, "attach");
-            const info = await awaitWithSignal(() => this.#backend.attach(id, operationOptions(options, scoped?.signal)), scoped.signal);
-            return new Sandbox(sandboxConstructorToken, this.#backend, this.#lifecycle, { ...info, id, provider: this.providerName }, this.#timeout);
-        }
-        catch (error) {
-            throw withContext(error, this.providerName, "attach");
-        }
-        finally {
-            scoped?.dispose();
-            release();
-        }
+            return this.#backend.attach(id, fetchOptions);
+        });
     }
     async get(id, options = {}) {
-        const release = this.#begin("get");
+        return this.#openById("get", id, options, (fetchOptions) => {
+            if (!this.#backend.refresh)
+                unsupported(this.providerName, "get");
+            return this.#backend.refresh(id, fetchOptions);
+        });
+    }
+    async #openById(operation, id, options, fetch) {
+        const release = this.#begin(operation);
         let scoped;
         try {
             scoped = operationSignal(options, this.#timeout);
@@ -476,17 +89,20 @@ export class Client {
                 throw sandboxError({
                     kind: ErrorKind.InvalidArgument,
                     provider: this.providerName,
-                    operation: "get",
+                    operation,
                     field: InfoFieldId,
                     message: "sandbox-kit: sandbox ID must not be blank",
                 });
-            if (!this.#backend.refresh)
-                unsupported(this.providerName, "get");
-            const info = await awaitWithSignal(() => this.#backend.refresh(id, operationOptions(options, scoped?.signal)), scoped.signal);
-            return new Sandbox(sandboxConstructorToken, this.#backend, this.#lifecycle, { ...info, id, provider: this.providerName }, this.#timeout);
+            const info = await awaitWithSignal(() => fetch(operationOptions(options, scoped?.signal)), scoped.signal);
+            return new Sandbox(sandboxConstructorToken, {
+                backend: this.#backend,
+                owner: this.#lifecycle,
+                info: { ...info, id, provider: this.providerName },
+                ...(this.#timeout === undefined ? {} : { timeout: this.#timeout }),
+            });
         }
         catch (error) {
-            throw withContext(error, this.providerName, "get");
+            throw withContext(error, this.providerName, operation);
         }
         finally {
             scoped?.dispose();
@@ -533,7 +149,12 @@ export class Client {
                     field: ConfigFieldProvider,
                     message: "sandbox-kit: response provider differs from selected provider",
                 });
-            return new Sandbox(sandboxConstructorToken, this.#backend, this.#lifecycle, { ...result.sandbox, provider: this.providerName }, this.#timeout);
+            return new Sandbox(sandboxConstructorToken, {
+                backend: this.#backend,
+                owner: this.#lifecycle,
+                info: { ...result.sandbox, provider: this.providerName },
+                ...(this.#timeout === undefined ? {} : { timeout: this.#timeout }),
+            });
         }
         catch (error) {
             throw withContext(error, this.providerName, "create");
@@ -599,151 +220,3 @@ export class Client {
         };
     }
 }
-/** Materializes a plain client config into the generated protobuf message. */
-function materializeClientConfig(input) {
-    const { auth, timeout, ...rest } = input;
-    return create(ConfigSchema, {
-        ...rest,
-        ...(timeout === undefined ? {} : { timeout: durationFromMs(timeout) }),
-        ...(auth === undefined
-            ? {}
-            : { auth: { credentials: authCredentials(auth) } }),
-    });
-}
-function wireTimeoutOptions(options) {
-    return options.timeout === undefined
-        ? {}
-        : { timeout: durationFromMs(options.timeout) };
-}
-/** Materializes plain create options into the generated protobuf message. */
-function materializeCreateOptions(input) {
-    const { source, readiness, providerOptions, network, ...rest } = input;
-    const withDurations = materializeDurationFields(rest);
-    return create(CreateOptionsSchema, {
-        ...withDurations,
-        ...(network === undefined
-            ? {}
-            : { network: materializeNetworkConfig(network) }),
-        ...(source === undefined ? {} : { source: { kind: sourceKind(source) } }),
-        ...(readiness === undefined
-            ? {}
-            : { readiness: { check: readinessCheck(readiness) } }),
-        ...(providerOptions === undefined
-            ? {}
-            : { providerOptions: metadataObjectFromMap(providerOptions) }),
-    });
-}
-/** Wrap public string-array allowlists into wire StringAllowlist messages. */
-function materializeNetworkConfig(network) {
-    const { outboundCidrs, outboundDomains, inboundCidrs, ...rest } = network;
-    return {
-        ...rest,
-        ...(outboundCidrs === undefined
-            ? {}
-            : { outboundCidrs: { entries: outboundCidrs } }),
-        ...(outboundDomains === undefined
-            ? {}
-            : { outboundDomains: { entries: outboundDomains } }),
-        ...(inboundCidrs === undefined
-            ? {}
-            : { inboundCidrs: { entries: inboundCidrs } }),
-    };
-}
-function authCredentials(auth) {
-    if (auth.apiKey !== undefined)
-        return { case: "apiKey", value: auth.apiKey };
-    if (auth.tokenPair !== undefined)
-        return {
-            case: "tokenPair",
-            value: auth.tokenPair,
-        };
-    if (auth.bearerToken !== undefined)
-        return {
-            case: "bearerToken",
-            value: auth.bearerToken,
-        };
-    if (auth.oauthRefresh !== undefined)
-        return {
-            case: "oauthRefresh",
-            value: auth.oauthRefresh,
-        };
-    return { case: undefined };
-}
-function sourceKind(source) {
-    if (source.providerDefault !== undefined)
-        return {
-            case: "providerDefault",
-            value: {},
-        };
-    if (source.image !== undefined)
-        return { case: "image", value: source.image };
-    if (source.snapshot !== undefined)
-        return { case: "snapshot", value: source.snapshot };
-    if (source.warmPool !== undefined)
-        return { case: "warmPool", value: source.warmPool };
-    return { case: undefined };
-}
-function readinessCheck(readiness) {
-    if (readiness.tcpPort !== undefined)
-        return { case: "tcpPort", value: readiness.tcpPort };
-    if (readiness.command !== undefined)
-        return { case: "command", value: readiness.command };
-    return { case: undefined };
-}
-function unsupported(provider, operation) {
-    throw sandboxError({
-        kind: ErrorKind.Unsupported,
-        provider,
-        operation,
-        field: "",
-        message: "sandbox-kit: provider does not support " + operation,
-    });
-}
-function withContext(error, provider, operation) {
-    if (error instanceof SandboxError) {
-        if (error.provider === provider && error.operation === operation)
-            return error;
-        return sandboxError({
-            kind: error.kind,
-            provider: error.provider || provider,
-            operation: error.operation || operation,
-            field: error.field,
-            message: error.message,
-            ...(error.rule === undefined ? {} : { rule: error.rule }),
-            ...(error.statusCode === undefined
-                ? {}
-                : { statusCode: error.statusCode }),
-            ...(error.providerCode === undefined
-                ? {}
-                : { providerCode: error.providerCode }),
-            ...(error.providerSource === undefined
-                ? {}
-                : { providerSource: error.providerSource }),
-        }, error.cause);
-    }
-    if (error instanceof DOMException && error.name === "AbortError")
-        return sandboxError({
-            kind: ErrorKind.Canceled,
-            provider,
-            operation,
-            field: "",
-            message: error.message,
-        }, error);
-    if (error instanceof DOMException && error.name === "TimeoutError")
-        return sandboxError({
-            kind: ErrorKind.Timeout,
-            provider,
-            operation,
-            field: "",
-            message: error.message,
-        }, error);
-    return sandboxError({
-        kind: ErrorKind.Unknown,
-        provider,
-        operation,
-        field: "",
-        message: error instanceof Error
-            ? error.message
-            : "sandbox-kit: provider operation failed",
-    }, error);
-}

package/dist/client/errors.d.ts

@@ -0,0 +1,35 @@
+import { ErrorKind as ProtoErrorKind } from "@sandbox-kit/contracts/sandbox";
+import type { ErrorInfo } from "#contracts/sandbox_data_contracts.js";
+export declare const ErrorKind: {
+    readonly Unknown: ProtoErrorKind.UNKNOWN;
+    readonly InvalidArgument: ProtoErrorKind.INVALID_ARGUMENT;
+    readonly Unsupported: ProtoErrorKind.UNSUPPORTED;
+    readonly Authentication: ProtoErrorKind.AUTHENTICATION;
+    readonly PermissionDenied: ProtoErrorKind.PERMISSION_DENIED;
+    readonly NotFound: ProtoErrorKind.NOT_FOUND;
+    readonly AlreadyExists: ProtoErrorKind.ALREADY_EXISTS;
+    readonly Conflict: ProtoErrorKind.CONFLICT;
+    readonly RateLimited: ProtoErrorKind.RATE_LIMITED;
+    readonly ResourceExhausted: ProtoErrorKind.RESOURCE_EXHAUSTED;
+    readonly Timeout: ProtoErrorKind.TIMEOUT;
+    readonly Canceled: ProtoErrorKind.CANCELED;
+    readonly Unavailable: ProtoErrorKind.UNAVAILABLE;
+    readonly InvalidResponse: ProtoErrorKind.INVALID_RESPONSE;
+    readonly Internal: ProtoErrorKind.INTERNAL;
+    readonly FailedPrecondition: ProtoErrorKind.FAILED_PRECONDITION;
+};
+export type ErrorKind = (typeof ErrorKind)[keyof typeof ErrorKind];
+export declare class SandboxError extends Error {
+    readonly kind: ErrorInfo["kind"];
+    readonly provider: string;
+    readonly operation: string;
+    readonly field: string;
+    readonly rule: string | undefined;
+    readonly statusCode: number | undefined;
+    readonly providerCode: string | undefined;
+    readonly providerSource: string | undefined;
+    constructor(info: ErrorInfo, options?: ErrorOptions);
+}
+export declare function sandboxError(info: ErrorInfo, cause?: unknown): SandboxError;
+export declare function unsupported(provider: string, operation: string): never;
+export declare function withContext(error: unknown, provider: string, operation: string): SandboxError;