Module lua 

Re-exports

pub use builtins::LuaAxumRouter;

Modules

async_bridge

builtins

file_source

Pluggable file source for Lua’s fs.read / fs.read_bytes.

Structs

ApprovalConfig

Per-run approval state consumed by the approval gate: which operation indices are pre-approved for this run and which single index (if any) must fail terminally.

VmOptions

Full VM configuration. New knobs are added here rather than by widening create_vm_configured, keeping the older factory signatures stable.

Enums

ExecMode

Execution mode selecting which post-registration gate (if any) is applied to a VM.

Constants

APPROVAL_ENV

Set to 1 or true to activate approval mode for every VM the process creates. Mutating builtins stay registered but suspend for per-operation approval via the resume flow instead of executing. The --approval-mode CLI flag activates the same mode per invocation and takes precedence over read-only mode.

BLOCK_GLOBALS_ENV

Comma-separated list of additional globals to nil out at VM creation time (defense-in-depth knob for hardened deployments). Names support dotted paths into stdlib tables — e.g. ASSAY_BLOCK_GLOBALS=dofile,os.execute,debug.getinfo.

MODULES_PATH_ENV

Environment variable to override the global module search path.

READONLY_ENV

Set to 1 or true to activate read-only mode for every VM the process creates. Mutating builtins stay registered but raise readonly: <name> blocked errors instead of executing. The --readonly CLI flag activates the same mode per invocation.

Functions

approval_config_from_env

Resolve the approval set + denied index from the environment. Empty when the vars are absent, which is the first-run (nothing approved yet) case.

approval_from_env

create_vm

create_vm_configured

create_vm_with_lib_path

create_vm_with_options

create_vm_with_paths

inject_env

readonly_from_env