-- test/plugins/sandbox_ok.lua-- Load-time sandbox assertions. If any unsafe global is reachable, this-- raises at load and the plugin fails to load -- which the C test detects as-- a sandbox escape. A clean sandbox loads this successfully and registers-- the marker tool below.---- This runs at file scope (load phase), so it exercises the sandbox as seen-- by plugin top-level code. assert(os == nil, "os must not be exposed")assert(io == nil, "io must not be exposed")assert(require == nil, "require must not be exposed")assert(load == nil, "load must not be exposed")assert(dofile == nil, "dofile must not be exposed")assert(loadfile == nil, "loadfile must not be exposed")assert(package == nil, "package must not be exposed")assert(collectgarbage == nil, "collectgarbage must not be exposed") -- Safe libraries that SHOULD be present.assert(type(string) == "table", "string must be available")assert(type(table) == "table", "table must be available")assert(type(math) == "table", "math must be available")assert(type(json) == "table", "json module must be available")assert(type(clm) == "table", "clm module must be available") -- Object keys serialize in sorted order: a tool schema built from a Lua table-- rides in the prompt prefix a provider caches, and Lua's own table order-- varies per process.assert(json.encode({ b = 1, a = 2, c = 3 }) == '{"a":2,"b":1,"c":3}',    "json.encode must sort object keys") -- An empty table sorts nothing: the key array is never allocated, and-- handing NULL to qsort is undefined even for zero elements.assert(json.encode({}) == '{}', "json.encode must handle an empty table")assert(json.encode({ outer = {} }) == '{"outer":{}}',    "json.encode must handle a nested empty table") -- Register a marker tool so the C test can confirm this plugin loaded fully.clm.tool_register("sandbox_ok_marker", {    description = "marker: the sandbox self-test plugin loaded cleanly",    no_prompt = true,    hidden = true,    params_schema = { type = "object", properties = {} },    invoke = function(args, ctx) ctx:complete("ok") end,})