Skip to content

Use script capabilities#29

Merged
ryanlua merged 16 commits intomainfrom
script-capabilities
Mar 20, 2026
Merged

Use script capabilities#29
ryanlua merged 16 commits intomainfrom
script-capabilities

Conversation

@ryanlua
Copy link
Owner

@ryanlua ryanlua commented Mar 20, 2026

No description provided.

Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: Ryan Luu <ryan.luu@ryanluu.dev>
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: GitHub <noreply@github.com>
@ryanlua ryanlua self-assigned this Mar 20, 2026
Copilot AI review requested due to automatic review settings March 20, 2026 07:15
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds Roblox script-capabilities sandboxing to the packaged Purse script container and updates code/docs so runtime-created instances remain inside the sandboxed container.

Changes:

  • Parent internal BindableEvents to script so they’re created within the script’s capability sandbox.
  • Add models/Purse/init.meta.json to enable Sandboxed and set the Capabilities bitmask for the Purse ModuleScript container.
  • Document capabilities (new docs/capabilities.md) and add it to the MkDocs nav; adjust guide snippet line references.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
src/init.luau Parents BindableEvents to script to keep them within the script capability container.
models/Purse/init.meta.json Configures sandboxing + capability bitmask for the packaged Purse entrypoint script.
mkdocs.yml Adds the new “Capabilities” docs page to navigation.
docs/guide.md Updates snippet line anchors/line numbers to match source shifts.
docs/capabilities.md New documentation describing sandboxing and required capabilities.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@ryanlua ryanlua merged commit 01dbb07 into main Mar 20, 2026
8 checks passed
@ryanlua ryanlua deleted the script-capabilities branch March 20, 2026 07:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants