T

checkpoint / checkpoint (push) Successful in 1m52s

Details

UGC scripting DSL: data-driven verb/condition interpreter

Implements docs/architecture/scripting_sandbox.md's primary recommendation
(a fixed verb/condition/trigger DSL expressed as data, zero attack
surface) rather than the out-of-process sidecar the sibling task had
originally assumed. ScriptBehavior/ScriptRule parse and whitelist rule
data at load time; ScriptInterpreterNode is the only code that ever runs,
dispatching every verb through a closed match() -- never call()-by-name
from data. Verbs: give_item, play_sound, move, rotate, spawn_from_catalog,
set_timer. Triggers: on_interact, on_enter, on_touch, on_timer. Demo
wired into test_level.tscn (ScriptedChest). 50/50 smoke assertions,
independently re-verified, including 9 distinct malformed/unsafe-rule
rejection cases and a real spawn_from_catalog resolving only through the
trusted catalog, never a raw data-supplied path.

2026-09-14 19:34:12 +00:00

.gitea/workflows

CI: run the checkpoint suite in a venv (host Python is PEP 668 externally-managed)

2026-09-05 22:36:24 +00:00

addons

Bring in Godot project + address review feedback (this branch had none of it)

2026-08-17 21:24:43 +00:00

assets

Add ScriptBehavior DSL: data-driven, non-Turing-complete UGC scripting

2026-09-14 19:32:22 +00:00

backend

PC3 Phase 3.3 fix: RATE_LIMIT_ENABLED flag so the smoke suite isn't throttled