airsl 0.1.3

Embeddable Lua 5.4 runtime with a capability-gated sandbox and a host standard library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

-- A script that reaches a module this crate does not ship, through a root table of the host's
-- choosing.
--
-- Nothing here names `airsstack`. The host built this engine with `RootTable::new("myapp")`, so
-- that is the only global the script sees — and the contributed module sits in it alongside the
-- built-ins, indistinguishable from them at the call site.

local recorded = {}

for _, name in ipairs({ "requests", "cache.hits", "cache.misses" }) do
  recorded[#recorded + 1] = myapp.metrics.record(name)
end

-- A built-in, reached through the same custom root. `json` was never told the table was renamed;
-- the engine installs every module into whichever root it was built with.
print(myapp.json.encode(recorded))

-- The grant check lives in Rust, inside the host function, before the operation. A script cannot
-- reach around it — `pcall` observes the refusal, it does not bypass it.
local ok, refusal = pcall(myapp.metrics.reset)
print("reset allowed: " .. tostring(ok))

-- Trimmed to the first line. The traceback that follows names chunk positions that move whenever
-- this file is edited, and the refusal itself is the part worth reading.
refusal = tostring(refusal)
print("refusal: " .. (string.match(refusal, "^[^\n]*") or refusal))