-- test/plugins/sandbox_ok.lua
-- Load-time sandbox assertions. If any unsafe global is reachable, this
-- raises at load and the plugin fails to load -- which the C test detects as
-- a sandbox escape. A clean sandbox loads this successfully and registers
-- the marker tool below.
--
-- This runs at file scope (load phase), so it exercises the sandbox as seen
-- by plugin top-level code.

assert(os == nil, "os must not be exposed")
assert(io == nil, "io must not be exposed")
assert(require == nil, "require must not be exposed")
assert(load == nil, "load must not be exposed")
assert(dofile == nil, "dofile must not be exposed")
assert(loadfile == nil, "loadfile must not be exposed")
assert(package == nil, "package must not be exposed")
assert(collectgarbage == nil, "collectgarbage must not be exposed")

-- Safe libraries that SHOULD be present.
assert(type(string) == "table", "string must be available")
assert(type(table) == "table", "table must be available")
assert(type(math) == "table", "math must be available")
assert(type(json) == "table", "json module must be available")
assert(type(clm) == "table", "clm module must be available")

-- Register a marker tool so the C test can confirm this plugin loaded fully.
clm.tool_register("sandbox_ok_marker", {
    description = "marker: the sandbox self-test plugin loaded cleanly",
    no_prompt = true,
    hidden = true,
    params_schema = { type = "object", properties = {} },
    invoke = function(args, ctx) ctx:complete("ok") end,
})