@markii/lua 0.5.0 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -17,7 +17,7 @@ function capabilityError(message) {
17
17
  * (see `callNetProvider` below) instead of relying on a message string a
18
18
  * script could read and forge.
19
19
  *
20
- * This closes P2-c (PENTEST-REPORT-2026-08-23.md §9.3): the earlier host-side
20
+ * This closes P2-c (docs/archive/PENTEST-REPORT-2026-08-23.md §9.3): the earlier host-side
21
21
  * fix embedded a per-run random tag in the thrown message so the host could
22
22
  * reclassify the failure, but that message crosses back into Lua, where a
23
23
  * script's own `pcall`/`tostring` reads the tag and then forges it. The brand
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@markii/lua",
3
- "version": "0.5.0",
3
+ "version": "0.6.0",
4
4
  "description": "Sandboxed Lua 5.4 (wasmoon) execution runtime for Mark's document scripting: an empty-env global whitelist, two-tier capability-gated net/cache/bundle access, instruction-count/wall-clock/memory limits, and depth/size-capped Lua<->JS marshaling.",
5
5
  "keywords": [
6
6
  "markdown",
@@ -44,8 +44,8 @@
44
44
  "lint": "eslint ."
45
45
  },
46
46
  "dependencies": {
47
- "@markii/bundle": "0.5.0",
48
- "@markii/runtime": "0.5.0",
47
+ "@markii/bundle": "0.6.0",
48
+ "@markii/runtime": "0.6.0",
49
49
  "wasmoon": "^1.16.0"
50
50
  }
51
51
  }