phosphor-scripting

Generic sandboxed Luau host with CPU and heap guards.

A domain-agnostic Luau host that owns VM lifecycle, luaL_sandbox, a CPU-time watchdog, a per-engine heap cap, bytecode compile and load, and a QVariant-to-Lua marshalling layer. It knows nothing about tiling or any other domain, so each domain binding stays small. LuauEngine exposes an entirely QVariant-based surface and never lets lua_State cross the library boundary, while a shared LuauWatchdog bounds CPU time and a capped allocator (64 MiB default) turns a runaway script into a catchable error.

Full API →

Key types

LuauEngine
The sandboxed VM with a QVariant-only API (init / runPrelude / sandbox / callModule).
LuauWatchdog
Shared CPU-deadline supervisor that aborts runaway scripts; one can serve many engines.

Dependencies

See also

References