@markii/lua 0.17.0-next.4 → 0.17.0-next.6

package/dist/index.d.ts

@@ -1,19 +1,14 @@
 export type { ScriptFailure, ScriptLimitKind, ScriptMarshalReason, } from './errors.js';
 export { CAPABILITY_ERROR_TAG, FETCH_DECODE_ERROR_TAG, MARSHAL_ERROR_TAG, ScriptLimitError, } from './errors.js';
 export type { CreateEmptyLuaEngineOptions } from './globals.js';
-export { ALLOWED_GLOBALS, DENIED_GLOBALS, MISSING_WASM_URI_MESSAGE, MissingWasmUriError, createEmptyLuaEngine, isNodeEnvironment, } from './globals.js';
-export type { LimitHandle, ScriptLimits } from './limits.js';
-export { DEFAULT_LIMITS, installLimits } from './limits.js';
-export type { CacheEntry, CacheProvider, CapabilityConfig, CapabilityDenial, CapabilityDenials, CapabilityTier, NetGrants, NetProvider, NetResponse, } from './capabilities.js';
-export { DEFAULT_MAX_FETCH_BYTES, bytesToLuaString, buildCapabilities, isNetProviderDenial, luaStringToBytes, netProviderDenial, } from './capabilities.js';
-export type { DocConfig } from './doc.js';
-export { buildDoc } from './doc.js';
-export type { JsonTableConfig } from './json-table.js';
-export { buildJsonTable } from './json-table.js';
+export { MISSING_WASM_URI_MESSAGE, MissingWasmUriError, createEmptyLuaEngine, } from './globals.js';
+export type { ScriptLimits } from './limits.js';
+export { DEFAULT_LIMITS } from './limits.js';
+export type { CacheEntry, CacheProvider, CapabilityTier, NetGrants, NetProvider, NetResponse, } from './capabilities.js';
+export { DEFAULT_MAX_FETCH_BYTES, isNetProviderDenial, netProviderDenial, } from './capabilities.js';
 export type { MarshalLimits } from './marshal.js';
-export { DEFAULT_MARSHAL_LIMITS, buildMarshalPrelude, checkJsonWithinLimits, finalizeMarshaledValue, wrapUserCode, } from './marshal.js';
-export type { PackModuleResolver, RequireConfig } from './require.js';
-export { buildRequire } from './require.js';
+export { DEFAULT_MARSHAL_LIMITS } from './marshal.js';
+export type { PackModuleResolver } from './require.js';
 export type { RunScriptOptions, RunScriptResult } from './sandbox.js';
 export { runScript } from './sandbox.js';
 export type { LuaExecutorConfig } from './executor.js';

package/dist/index.js

@@ -3,13 +3,16 @@
 // filesystem). No React, no @markii/core, no @markii/react — see AGENTS.md's
 // import rule and the ESLint guard in the root config. May depend on
 // @markii/bundle for the `ScriptView` capability type only.
+//
+// This entry is the package's semver promise. The sandbox's assembly parts
+// (the capability, document, require, marshalling and limit builders and the
+// global lists) stay inside the package, so hardening the sandbox never
+// changes a public name. `@markii/lua/internal` carries the one assembly
+// part another workspace here builds on, with no semver promise.
 export { CAPABILITY_ERROR_TAG, FETCH_DECODE_ERROR_TAG, MARSHAL_ERROR_TAG, ScriptLimitError, } from './errors.js';
-export { ALLOWED_GLOBALS, DENIED_GLOBALS, MISSING_WASM_URI_MESSAGE, MissingWasmUriError, createEmptyLuaEngine, isNodeEnvironment, } from './globals.js';
-export { DEFAULT_LIMITS, installLimits } from './limits.js';
-export { DEFAULT_MAX_FETCH_BYTES, bytesToLuaString, buildCapabilities, isNetProviderDenial, luaStringToBytes, netProviderDenial, } from './capabilities.js';
-export { buildDoc } from './doc.js';
-export { buildJsonTable } from './json-table.js';
-export { DEFAULT_MARSHAL_LIMITS, buildMarshalPrelude, checkJsonWithinLimits, finalizeMarshaledValue, wrapUserCode, } from './marshal.js';
-export { buildRequire } from './require.js';
+export { MISSING_WASM_URI_MESSAGE, MissingWasmUriError, createEmptyLuaEngine, } from './globals.js';
+export { DEFAULT_LIMITS } from './limits.js';
+export { DEFAULT_MAX_FETCH_BYTES, isNetProviderDenial, netProviderDenial, } from './capabilities.js';
+export { DEFAULT_MARSHAL_LIMITS } from './marshal.js';
 export { runScript } from './sandbox.js';
 export { createLuaExecutor } from './executor.js';

package/dist/internal.d.ts

@@ -0,0 +1,2 @@
+export type { RequireConfig } from './require.js';
+export { buildRequire } from './require.js';

package/dist/internal.js

@@ -0,0 +1,4 @@
+// @markii/lua/internal: the sandbox assembly parts another workspace in this
+// repository builds on. It carries NO semver promise: a name here can change
+// or disappear in any release. An outside consumer should use the main entry.
+export { buildRequire } from './require.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@markii/lua",
-  "version": "0.17.0-next.4",
+  "version": "0.17.0-next.6",
   "description": "Sandboxed Lua 5.4 (wasmoon) execution runtime for Mark's document scripting: an empty-env global whitelist, two-tier capability-gated net/cache/bundle access, instruction-count/wall-clock/memory limits, and depth/size-capped Lua<->JS marshaling.",
   "keywords": [
     "markdown",
@@ -29,6 +29,11 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
       "default": "./dist/index.js"
+    },
+    "./internal": {
+      "types": "./dist/internal.d.ts",
+      "import": "./dist/internal.js",
+      "default": "./dist/internal.js"
     }
   },
   "files": [
@@ -44,8 +49,8 @@
     "lint": "eslint ."
   },
   "dependencies": {
-    "@markii/bundle": "^0.17.0-next.4",
-    "@markii/runtime": "^0.17.0-next.4",
+    "@markii/bundle": "^0.17.0-next.6",
+    "@markii/runtime": "^0.17.0-next.6",
     "wasmoon": "^1.16.0"
   }
 }