From 7232ede09db7f26d601ffb18459a6e4b399f072e Mon Sep 17 00:00:00 2001
From: Redo <A509DCFC@cock.li>
Date: Mon, 6 Oct 2025 23:03:12 -0500
Subject: [PATCH] make :members() not return index, add -DBLLUA_ALLOWFFI, allow
 reading modules/lualib/, bug fixes

---
 BlockLua.dll           | Bin 378956 -> 379468 bytes
 readme.md              |  23 ++++++++--------
 src/bllua4.cpp         |  21 ++++++++-------
 src/lua-env-safe.lua   |  20 +++++++-------
 src/lua-env.lua        |   4 +++
 src/util/libbl.lua     |  58 ++++++++++++++++++++++++-----------------
 src/util/libts-lua.lua |   5 ++--
 src/util/std.lua       |   2 +-
 8 files changed, 76 insertions(+), 57 deletions(-)

diff --git a/BlockLua.dll b/BlockLua.dll
index a11bb18335f804d638bf3b4d7a73cee0418b6557..35465213ed3821161fb55ca61e8685df6c5fb5c0 100644
GIT binary patch
delta 8998
zcmb7K30PCtwm#XM!w?Zs5fCXxR3-sIl8}KUKmidEt)it)5J`~Gm_!JQh=O7*;DjE{
zHdeiqR&VQT9f~#H_SWmI)2-LJiq@&tT8rA&p;WE<$Xh!(!O+|9eecEZoPV!>uVJsX
z_daKnc%nJz#QLD-hQMXbw@N7)Lj`zJ)D6mWNG~3Wr8ckKDnqI2wU@W^6E@Kl<xf%6
zX10kpg4fFK<3;k`XRpKkDC>#F^KP<JP$cgGyBO|I+3j$D#-4&ZVjshuX2U!pd0}i8
z+{0M|+#^^E+@sh7aF1bc!#$q$qa%5eHZgsPhqBhN{+@>rZ#{d#GZJ;MY?o&!I?l48
zUWfdDTSrs(Vvo_oX#WN3jti^V`(BOc(*(BKI~Q4!*?)Pbd3+s3v%9?m(ThlSm`@Bk
z6Uk2S8H65+39t=5QT&g@G*$nTZ)0XByT^L~d)h~Z7O!aY=MUkbpa?dp*S@fdH8j<j
zd22=HtwwrShsYt_;H1bkZC<{$Jk-95ZRoA-9l468R%HG}^g>s$&w3Z5i!0eezuV~k
zinh^xjJ)16o4OSyHL-{MSyZx`E$FKX9=@7%bbfVca^ny6KSiy`^d?SrHL|<<CZNfU
z?00?D=$AM)qhAbKx~k38Pwq3|Z}l{FEMpjLhYzR!xSl;YXjJSc(6gThb98Sk*HH>g
zeFqP+gdmMz#PJ37Y*^?Jlv&TFg$AMl_3Rs=g98FUxu@FQrR>Vku%OFJNhKci?7Oy<
z{b#5U*_N_TLSIcT1C{0#GhT3s1h2^SC5iM}>=>)>$H%MG5Z;^6FGq252|M?d`DpzT
z_U<b~{NG(dqBsT$mai^i2Ze>npVzrkO70Ht@cgU>Iv`c*URd3tTa>v!DM<%};WGTP
zjx~p6qJ?$r=V75}MqS%CVS9R`9p!B+W1sX2*i%AMz3Mg=dkKprgVDYccE98m&qC<G
zm(8l>K}c4@c1o1PWx&*TAQ)i%qE2eT01~d~M0dFFwP2ui7#z^DCTS>Y(Xy+h<Irnb
z_L_7EvS`_NWf90z%YG#bMI9P8OBRKWYFLwOB>GL`=+kOQpJ24cQEc$<P0}NAJOH`0
zqBSfdk3wD=cBFg^+FQ(4%ZH%fiyaPh#q1IJXp~*d`lSp-NyThZN;Hxbvolj}qoP@D
zS&B!zVR~b+S}!o_HHB)u-Z;OcL?=)P3TNr{mFjM$Em?IM#l*!4<`^}VdTqr>=+x_G
z33L?#wZ6g#H?Y)d1nLSwxmK--W7nhyvBBxDx1C96Jo_4qW<iujS1wQ+G=eC;j}Ln<
zdtkD_SPso7hk?<cU*PC1F~~}E22E7t%$|`(Mn((ZUo_u`J&_g6&K@&`JvnB?Fm09D
zVW!bla6>2rs$v@4WMo9;QPDHle`k$o%ggx{iFGAC(=?ZA4FWe)le+j#^=xg$v`8pI
z<P0c-L8lksG!I??>)GnpRyc0BS1lC5I8R$%uG471T4xYIDdMz-d2to$5^X#Pf+%g3
zwz$#^<$!=B_w?M{$!Ud?^CqQbWk&P4(&~(bMiY2Y2z17H(sFf_Yv)$#%C!~Xqg)H!
zoXqE&%5?@a``P%owte|gecSG9dnHcb`)KtQT8IN9a#VuEgEm*iJfonZvba=GqSI@k
z-jHm$w%BYeUoZ^n=}5m^YpyIekVIpN9sA7ksmD~EsjUr%2w2tr0U_p!bfZxpHBYUN
z7HAEcSiaA+NaL(BaKp;>hp-QA*w?v&N-7P-0tLHze_(&U50|-vbHrhH?H@jLdSqmL
zym^5sK0Xqfu>zsPCEte|1kq+s9}a2zb^mOded`MmJN1j0w!eL`D_A@#RuCT_57SRR
z;M_b)p&*k3Ie|ZIlzCM2Vnw7`Jxi~RBqS+=c@&%YLw^LzZOF|W0=pg$s$B?f7IA)@
z<AzcT6i&xJ+}xNe;$ctdAx&@`Uudov??`xzCRSij&(X#TDh*_<M5)VXS4<*{l6<%%
zpio)m#yR;FQQ#P=<@h+g<f-Q*X&tlFEo-3^G8t6G;rEZ)+6oAxWoKUu=W6U2tAK5}
zm^jd(`)4uR&R*Q%6CM}G_31QKafz`4$i>|PM0R&`c-zkJ68f;8J@y~aT^F~a2-whv
zLxaHVPs6Ale(a%i*M3>N*;?~Fb$JxY>3=JZfHhtmz{dQxSpI)>^QYrD{o5GcfIoG>
z_IeWL0VQJ<Pr`Z@Q2!(}uzT6{n6b8oC$FP6=GjEV-hb|o%C)TVSs;7rg(n;K!rOC>
z)?8}TV1XwupiTNhhj=CRtzB=ocJbgsw$?6>L$N6Hdz=_Yhx9HxS*5n0alDZ3oW!d~
z(1UUfcb?npAMlnPH1nN&3!<nF-CT-#ucdjR`dxA(@5n-6x`l_mU)UW2dG0@a!|c#V
zyzdBt`^3_|K`QXltub!2Q={`2r$#Q(K<*miLZ^n!sWJ4b+dz-NS)toi=VGT~HK$0O
zdYMs!yW&)fQ&GVw4s%l+>#n$iQ>3`T`NhHD{M<E?K6Sb}^fMWLM9^7y(RB~#sl3vW
z{c=ZV2yOuL==IK5VsL;H10YrMiuB(Pg8=mXJj+bb`ypNuOZQhc{qWol=R^?{q2t_l
zj`mwSp?%cZu6Z_J-SL^T-N~y`ckFbwsngJI{SM3G>CEV9z;zF*3VO(-HT}eqM6eoQ
zVzY1Hhp-axsd(BCt-gz|$J1$nX)o;dd%hhha8$d;IF4pted$Z#<dJlvSH2vAgkG{8
z8%d`G@IJ+K2A#+&wuv+7CWY6nm85gI?bs4}L2#e%w^gahv7^%KSY~J4Havb4J<is$
ziI#Zq>hL#P=(v!HEq41?hf11Dn(sW<J-0W%{Md$UrO)szEp%#d=$0yV!C$J>&2SxU
zsZ!quw+-8?)NQZPAMp0I(pP)qy}RgFaN2JAANcAnI@_{`&geVLbv!6G>*i?{338mV
zhZaEL@%%mX5=5uip6#Ixyjr8FO8pLZ*^JJ1g3gI{PA2`YL;Ex*{|Fe(wcmELclr5$
zV67u~!5nA6(Oh7yzDm6hE-#MP8D0+Z7q|8w1AW2SyYq2nFKyj<XS>$fIi3rY2M%6&
zvr0W3f`1HG7hJIrkZ@DDz=r|-z-bHE5a+j{&*k_q*n2=_+=IH>fxyGMr^XoI_@py0
zpz_pt)W8IaI=TQR7Ov-TMORm;5nKt?wywRjp*Irjz=kjB2yZ$CqQC{SuHo%FOsDct
z-F}>YgchTk{kG~O^dqlyKc(G{$gwlc&-*Qu-kb60LPvaQIuxj<UKI5p)o$NThT!T)
zt)!bG{lRc<otK7po&<-cG<^Fc9flUAVb4>5e^0{^r-1(;4bLR9cRF57(4L030v|@F
z+wDc}elzMlqCl3wm7R_souXq<MFtK#O-G>T893`S*!pMU5`rI(#>-EGZ~tt3fXG$Z
z_&UMI*|>|~8)I<T8R&m822VKya#{|aN6?akEd;~I;(Y|u$KrN^>aqAS!Bb;#*+tmc
z31?{<wU5Q(vp@#q;wfjrSxYWnO>lEAK1$G(i@VO!GPE}r%g%uw8i%J6{MR^KO)w-6
zZz7mF9)Ct~-FSTY9375+9FMz*%%6nAz6QKD87m2POvW<_9-D#}6TCPDZzcHS6nx-o
zIy^k4z;4&L7Yr3SCPDz*EqK%#3NShk{(HZHBhG`}{OLH0VB-v2LU7njyqw^snRq+F
z;YIl9c{&~;Eq+YoZ?!n^0$}WHEWQBwd7H3-$nhq;n&5O3-brwQ37@(^XQ5l=IItb$
zGv!#^4sly6@YHr%%-f807wJI}DKM<}8|?Nl7+Uw*@d)9$*4A{OTO08?FhN%vG5;dC
z3TnbJ1fMqH9D+V8$b5vMzAJDO!T)Z;I|!axfsZ@*mH6&ONTJs%9C8Wx;j6Ih63BN~
z<1!+@){L77zP%RjAjn^bk6(hJe#zor2zIW={k{P#wqWr$Fphi+HV|BI!P^PeSnzcY
z122PYvfw;|r5qMn@Bt#HSn%V^;QyQj2VMbxzgw{E3N23Wz;-)X&)xZ(9W&<GJET6;
zM!Q|yqdud0)F;r2KLI}|--_>E0sozwF#js}7r%q!uY#Ps8RuPvCHQnRZX$B{7QBPt
zpe^_~L9Z?NE<wW<%)bVHvbW%LKt{5~ZV$n{>#)@EHCl_#Z^2#H=&j7Mzu4^zJS>WN
z9`GfR&Fco;n-^A{Oj9*7nmYI)d@U48Q8^J5bt;mgq|omC&^GEjI$~h$Pms*2WJ~gv
z<eka3<O9h!l7C2klx$D-k_?gzlZ=q0NHQb^61AjMvOuy#vO%&{vQ4s2azJuUaz%1e
z@~h;zq>nUMI#`+@l}K}?lcm$8bEK8hM(H}KRk}m^iS(%Sw6tCNOp0WD*>G8+Od%U1
zn=C7omCB5=dfCca87tc?+b-KF`&@Qjc1?Cm#>oBT1LS$~8S)ajL0%zmkpGwbpYrqa
zALS3_y;1^G#-)^}cq_&#N)>gA4;5z=R}@bagOxI6v9ergRsN#nt0GkSs#z+dYJqBr
zYMbhy>Z0nt3bIV4DKkKDLUe*C@%O}cM@f=0lWNB$;iN4|A13Wd+Mo1wQiyP{Fh(d5
zs)QNBX+o2*Qn*~WU3g7+Q~0}(7Ws(!i-wCviDrpri}s5CAv!ENE&5h;M-(6q6Gw~V
z#p9B{O&%<nDY+-<FP$qLpW>yYCeV~G1eJ*4Rzy?eNHj{kTr5vslN=)jq1HrGsemWN
zkHr<qmy>TM-%X|^Ns?2N1JZv>CGwf_x8+yl{ZjNPjVb?3>7xi!1S(^cIm%1QeAP#)
z?^G0g_mU0vd5J%#3{gZYvJ}%58byU-sbZhvfa1L3Tg5|#hqAXaNExRTDMu@3D7DH%
z$}7rVDu1X`ysB2NI;*-(%F|3!!2l+x#J`h%NV=OO02e^C&{PA!#l)ad`cdtpgh@-2
zb_g#+MeYh837-j(h%f3V3K4~iVxTfIQMxEcG*L7aYE&jF7gdYC7F`nkDDo2z6ps|k
z#2Ml-;(W1MtP>l=i^MC%mT2)-@pkbjsZ5$K&5=%&PL<A*mPyN{)zYQXCRjw9q^*u+
z^qJK5;sqVxfrL35`Y~d(d;5kQCX6}r*DCc4+;<Wa)K)~-@GOYw3mUfmh&kvFI<^b_
z7#cwXUkP9$(Xs6|dH|zGe1{oq-+st;tsnC<56>RR^g(C-imL`PGW6qL@!o;V5oG$n
zwlIYGk^zrcC1AD@hqncci3ggtf^g<AkHiWa#-Jc{(2B$5Ot{BED~%sYnO8j5f%{G?
zE&~#ET5YT4%woFs;TVb{PYw9~7Czs=OIS4Co#_BZ+=F=vOeY*&Ut0C@p{S|L-I*|8
zcJyEpfO%`HyG|M~NwwSDsYyUR9l>*RT?S0eT@N>ADKMQ6-5Coo)sZyl2q<!}hXq2c
zV%(XJfC(SrV&cv4<qzmRp#7ZTJ$Tb1XlgzWpP9%6;Mg?g1<D<PW73(!D1QWgkj}Jo
zsKbdF%vz895ssP;#Md*J5VT|jewM+62i*9N0AQSu3C46RaT1PWvY5R@xRJ$#M=XnV
zjfaeRG@qj0;TR9fH9|Vp7Bw0|pi7*Gt>c(s_*4$V$H5s)f2_)882r%~=JJ0i=m}$(
z&4jE?pz+kPOjM2}&KZv!(BO3e@z#uVXWD>KCAc$(fHC)A&I6N}ginlxHFPP~_FycN
z!1Fkf<XmAmbsR%W@`dhc>3dPsBaU$fUJgv9$fe^-^h6S_83&b`Aa+&?^5o;XJZ5<}
z)AAZ*o;RM+drS~J<JBGlSD(T+@-JupYhYsFCG(QG15A4l#tR;Qff9Ee0Wgz$FhXE%
z_FyuB;Y;1Eii3bE?WSCrKnA7>OuI*{%(+HF3rkG!1%uWM1UD|1YOKt*_%$Y-*GuT=
zq9_ku4DLIgQDE;$%q3JLbJhYfkH=M`nSNv{Cro5$oSP3T6uMLEU>*Pslc98aP6jNS
z0`gD5bMs&HIz!h^l{@1*r$O8s-ajesOcpSo^kAj|^HkxkGY6P5r8`p(%=bN*b-+ZV
zyX&+9Gq8WAJGBp}j7<Fabtb&_)hzd(3(!;1gZTlN_j)iq*th&_cdNm`7<w==U=qi;
z>r4RV^IUgkHZVWej&rA~fchZMooNC_Io_Sw49uMg?o1mnk0-k`$AI~DiaT=|n4$tF
zgSvM(%u?VR%rg(On%hJPQ(+T*rgrI(z3SVCqP%ChGr_=Qb~CQ^WL9JSRG9gv8Zz^P
zaN#t@D}vU#22og8I9p>js-JPp%Rzv_%4y6q6uZ#1WMVQPLjFScm=l31hu=?}d&?CQ
zOwLRP(_1wz)08!!s9NNTN)p%vOe*}SLrk5^PXx@|9!vx<*2OqtCX<!3jq7nf&M!jG
z##&ck;_ntPzxQB%1!gGx6!dcAcL6hF3Enpow#dYKd>OFzn`Q1AQSig$$mQ-#5-{g_
zFe+enHn{8L07JtMb1x%J1_rNiF|NYga+Hef>8mjDaL5Ivg@w!=-a$OKgc*ts!XF|<
zFj<n7j&0mavXXcp`h)S=SDAtMpoYoD57h9$D_H4#lngJ_RT$I;iUNX*?~3MRh_%?w
zx@#6#H}|yGQ$YN|+Q|^>7&mKQ4V+B=?i?P$ts3%F;bcIN%P?I6N};Qqk0L-z2`DA3
zB8wqB;x_!k`La$QK%EldmrEz(8ae3hn+?y)f;G+!5OWgLn&EfTmxdj{9EH<hPs4&W
zxV;pDrL4s}buh^<*5PvmXR-J(!TR+$qzn-Hm1WE)=+b&@dXo|2h&P#Rbi*Okpbm}<
z*8};06I$GbusP84l<V0{1ZsoRQHTKqZ%)`q1b<ElG=dPk0T&sW8YJMzekLHJIH8#c
z37p_J7X%3>tRzAzC-BQb$mWCwB23@}&k7I<HsA>r5Tb}9kr~KRPN*Y-i4(erP{j!~
zl}t0L+u(e=B+P>|iJLGQkDt%1B@FlWuvEc`_4o$tS;d4)zTe=S2Inr`)0d*|_h60y
zGtctJsRCz3Rq&8#usGKVVBG?k68PgdVIfROX*G<_CEO;$W=BsAdY{v{xe$i@k;OUW
z=A}$3HqB$a@%0*5eSf6A@TZF)gWX)P-4>gEF>?;i$k-9x_Y5ZEBddJ|4>zlsU<?j3
z9B)?JsXC^bhXk7($>X9aj5kWKc1P8dp01@#86nH+0VP)4PB7Jq)0Y8eTk%eU6RbGo
zEx-aRUQV#ciXRaywc?q}0ZmqXoM4p|i{A#Uv*K2Q4OZ;e0N8BB)dV+M@oj=FRy?s0
z@B=G8KybGe$20-%x7sXCOcS51w(t$G+QC8A1~|9gSa0*S!0C*5Qex1ACA<T}T7gJW
z8$pJ(x_%=gBp#1%1RgTUw!)mi$X-~P)d2!-UY*b2f52a2saCvo6NK1r#a|L6W81`J
zk%^0c2jm18<2y`2K(^I2|Alk3bBaw1C|KJE-eIx=QhWHc4}||0V!^?i!3V75qRrr=
z)QXpFW;)1HHEdyO0&=_0)Z_uWa}Y&US#j4EIBj>V?~da5A+DH$tti~ew2=MMz7;Zp
z?VSG?$Q0JlL4vT|Vp|{vY@rD)P@*C$4ty6XKyARe1mOX(^j)Ta?9r=4hK<y(75q)G
t;=QdP7r<911cfpzc#m04cHQpxK!&-wP2}BHJnwzbH*K&5Z)1c*{|8dD=nMb=

delta 8358
zcmb7Jd0bOxx;{BMhg}6lL_my`vWXOukR3q^2vij7G8PdCiwcbaF;+w>?y^`5e&}m)
zDYa@HZ*{D3h;656)z;Bk_kF9Q=wR(A*D`3WL+<-!!O;2Z=Jz}2Iq&nX-+GpuY8rB?
zVMs%b&*(e%W-|(&@pfXEJB-r^cL5v8G&gQlvHhbOukUmdZR8lnlVO-<QYRQGXd$hF
zP{B5G8_&mx6FWh0hfHNd1&_&MJa?0wcz#Y!<C!7dcxFkUFjNpgQt&JydOQb{4Z={e
zUg%BE3B3hj<N<P#q(2ubkQrs%RRJshfOt9`W&hPkE;)s=7aK{BQvloANCKRXdj6w<
zV;)5w=Yl!Uh1!m9*N`X9wd^NRq|#*^yDXOc-DQmMPzXo%x%jXTUMIn>5$sp5lT25C
z_Lh_asc{W++bHFj<-d5;CU=o9Tn3XfuJLS1t<lqMgn$(W6N!6kVD1MTQ=8mgpWI%{
z1$T_FNOx?~pbw1B9@PT&NIj|PSJZD%J;&51|3d9t>dA|K1?<r}lH30Qd!yDkc0j41
zUwTciL3|B4>PgtCYsfUOc;CTmsG{q{(J8g}m;Vx0pX@?|Y+6nJ;uXz~Sxx@orDd;=
zBuN7!*z$T~*+8}H;6E?rnBz&ooEd*M`v*(OVSjPtHq;yx;3z$M%chuy%<>Kawi1)n
zqLYnJT}lE2MzFC<$(R5imS0NV2^j9pp>bcc>r2R*fWRRqm(ZT*?5q263Hdfa%6_(l
zJPUYJo`oh2^)p`D8sb}@>_HpyY>}l_k3A<Vw3yz7(yyxcrkczhwt!txO@1CW!n3iO
zX0a5Co^LE7{(*t&M~m%ElJ};!M1D|-3T!I#C~(R9?Tld%?UD{mV{765#l#Sp%)Yyr
zd>t6TW-K;d3;d!V+gxT`6Zy>D`;$W2)SC{qJSilg7|!l2BnK74oF<_DQ7X}@hp-Wa
zq)RdS^$28^cd%IC^7p%#g@b9jyi>jDE)<|ck;P$e0Vz`kunh%dtulihQ$TJhN3g33
z$S0~0wmYAkPzA78^GS*-jBU*)WvVyW`}r2#6pKzI&$o0o#&@C3qj`jgwq^~@C%ih0
zeWoREsMFZ(T2iSV!9LVl0=%Oo->Jv43N7icd5wKdOC*|bHcU%$G!NL!JY!1SQ-N_t
z{AreCB^DE5;&6$mRIgj;rYkMb>O@+du5>|BVQyh@`MlinB5fhniQ+_tIodMOA~)Ai
z-F&UCINx|6(c7syOkZjcp=G$Jv|JSC=IUx8979Y;t%^o04-20WF4F1?sg=dd9^C3o
zBRM+u=I$FITof)c%r4Snl=7m1hWX`sk-k_LDGHrgtSi!M=a7W7KY7w>^rfPr3PX{8
zUU8|OK-$RumYhgg(~*;D0fKPSmNL@lmHsPh9G&r|Gub~uY#cQu%*(SttEctMD=II>
z##R;)&mv!=Ze~|B*$00macM3_-9{gglVM(BX{nCvJQzrRI0#PVMYJBG|I)`j>^-fH
zCc-iaeEGU-XjGJ8VOgX|O8)WrU}B!{WbFAepCdng=S%jq4aB`LuPxSixNWbmd!#5T
zDk>cP&@;1RFk!C-x@ya3&9hMCi>HI4Ejm}%+<YAlMXq696b_rNG`}RQT)SXaks-_w
z8H((L{F0&qLt0^IILW!{BaC!&CF8D1yi_VI1^cN83CnNY6<>1xY7puFjWdb6=H_Ij
z*IkP-reE9b>Sb+{sJO6VR7|7@vk<{IAx6!;$N^+}ha1Uz9z^y(9Y{WS`kL|h(>+3B
zeCkCeKJy{_y4Tx7QrWoVS(<=6dhP|8J_2uIejZ51{^mu(e+w{9|Lsq#XIXi%-Vhe5
zD=mF@epzUw$hi6U*({m&a*%OlkAfw4|Lwi<ykO;dcIA2DU(a)YiDb3+!7GaMgDs;t
z55aNRJ&N-mSNG_5^YTu?io*ss%Z~7{nPr%c`EwcO)0T!s+E3_-Zbt7S(<}7zd}+1_
zbb)ofW3X6c{4b3jGDL|1dX*Vttx8Xe(hp`waUQuZahpX?UvKLY^+pFOd*1x9LW}6}
zb&7$a%iz-%8SkE`=YlD8ct8BzjMr^B25m?7{oh}eaR?b&Xnm)(k;C8MJcca5Oue<N
zU2L@&Z?njz7Ai-JuJu+6FPp_jXyNl8OxqhHX@k|`B6vn|0Z~|>`K-0y4x<?sc6JXf
ztlgoo#RqJKJ%N+aoS*2xE2l@5y@78k=Ud93XtjFds)JPm#?5=aK-+Qio~7|u&3Jv*
zdd-}v&~_ZV2iehFa_sw7u8?wb@wzv91v0dAS{~a-DtxTR{>-^cs|sVc{{mgn+!$Z=
zOSAcrM@KZ?A0P3S`{9Wr9!x_6ycNUMIwvSGa`bi6jTlbjE%*|AQ@9wxEK_<4R~P4e
zwvH-mOgENu3w;Ni`Lseycl-Iy$CJBspF+WAF2nTsW=<m%RKdfKxlw-OTg>JYM`t$7
zY<TFd``z5|>SvnxjJqS)u#HRbb=g#*P1;hSt-@pf)(Y(n3~Sh4p*2qAb_rUyb2t0J
z!Tnq+G<?AggWta34s9@UNifC8i3SDRR=c*qQ2bsIZpYDTSYYIqvYkrP3nQl&R8QAe
zXjj{gPv=;#17=zAkxi!hH}U#wn|uLru<d%DgTFn_{{yQn$&=o-CY0C`Pb{g>Zo}hO
zJZP{fIxEua>kij{O!Q})zau|%_A6gU-g;eaRjO?Ts4#$QafLP&6Muxq&v^J^LdqrD
z67NHNfp%-qhXy~7I(y)K$Ui~7V^aGyi#>)5gh|uSEY=qr7Bb_t<C&q+46}a$jw>Gj
z#A9$ph4wLGK!vHNmDBfQJ$Hfr7#HHwiPLVi$};GMg4XZ31OZ#t3W>)#8LMkGRUYS_
zIww9=o6RrjPBNyy%Stw}A1{2)e&@k)0Z2V}W|-5X&F1~I1iPNyOVte3`{L6=UOenQ
zg8{SS;lUX$kS&e}r?ZH=;vwWL@=fuOL*=e`SWNLzJZwciuruCl&U1{Lv|Jd5vH}lj
z0z5s-MX<Sv5O|IYVgH#3Dd*7lWg^U^_)#*fI)|}eCPN#Q3sc}W#k(ocLos<Q1fEBI
z$5@zp9_3M~@E*lwsjz`!|1@Z&7?lQ>DQ2WWH^r~gpyV2E^wAeMjy;kFvI|Hu=`i&I
z23wO3Ybn;G!}k=k)1l`Ar(#>uL3I)B9;ZVV#RG3aB}J!k&`dEh1HPiTI0LR<<bv1>
z8PG%J?o0^0gm_{SjHY;T668=cPKL!4k4}cI6faDMwo6=4kk3@JxzMr0*gVTXh>&Z?
z-8gG1u$M9ZZ&M-UGWr!{K?=qB(_tn>&umylaaA_#r0A6c-(TjU*vI+MP30d7z~>60
zZxP6@VEek}fS$^JdRR*_RS$b97U|*i6)uH6TLwN?QT|&Q$gX1EwR0isD(#<DmQD=O
zU|kKX%;rF>t#|SW{RH;Om5ub;)o`Br{CzdJUBg(y8i=6SUIXcff`3EfRnFgOGn)RV
z2I{ElVGZo2__ta(N%23m@bfin#<M!`yN<F~J*cjue0dF&P&sZb)KQ%GA?&8u{UMyZ
zj^*xcgvS)`tb>6!5GOQ&>;{&S&;)vlOPXLO#o0}8+lD?jQO<6H@f0W9a9k6#Q8}y$
zx^H6qwkGhoh4Jn;f$A0~OT4(=Y^HO%w+jrGQM0Tc+C{&hUe>3J#C^Jm1=x>q*aU!|
zZ(;m98^P^1#t-@kqHd%7S~HBljnlBb8S1Fqe-rGc=)4I|Qv9_Uex{hU3EY0dIMPj!
zh{%U+GMoKCa0jP5{KOTp$2LLFPuy1Cu*GcV@h(vy5aJ8E$@wnVPY{?B%Q0CBj@kDa
zK2!uSOnL}z45198#OwCYOyYZ7$k6I8Y|Y%*%Gjl`>tZ*>Zi_t@dm{F7?7i4WvF2D8
z*#MbH7ADikl4av$WwHv{64@r%4%r^rx3ZJ6bF#a#pJhEVXL*15aCxX)El-laCC`=@
z$}8kc<u&q6@*VO$@^9rQ<>%x-$^R+;UCt@o75<7)g+vjjNKs@cw2G2y#au<DVwIvn
zu~D%@(WW@AIIVc1c&;!jRLV5v+sZ6uuF{|c<sRi><pt#}<ufI#QmS%PT`IYHvRbEJ
zul}3*xcZ*jT@#|2pvlp!)LhqeYX-(8#Ep-e9#<4MC$2H>^SGmNH{!U_gGY~uzaP&e
zaEuNc{XukaOiWC*GG=*9ZOr<ZEiv0;4#hZ$-NioQVDU(Cw0NvITdWnAi`R)yh);{}
zi#x^t7MsOhl0eCL$s|dO<bNdlBwtH@kX({5Qa9;fsh?CC`$Md|EM0a*W|qy6t5v_M
znM{uHz+}NvJmql=eFzMcmP<op7sdL>QK&BCm?Xq6rFW&dvERp@#?J4I9WMJywp(tJ
z2P@N+^OVPxJ<4gS`Kmpt-&JmER^y|QX^v?U;x@+p7^jLyXMCfkF|MilsRygY>Qr^6
zI#;b%Z&UA9A6EaMzNLPm{!J~^4AqR#NHl4hiJHG?j%%K2USdC0`^AOEeG_*+j=?V_
zz8EAMd%_fRF6MHK2L?DA&$Mt%4f4Y1Y0*cbMKSuA4dU;yKQ4=Jiyw#|i@U`=Vkb#|
zi4XQmh$KoPlZ=+6U=K}|<Va>p4oQwlE=XQTc&WcML>euPl_p3tq*J6>(qd_abeXg+
zT)IvgB#)4b<tlliJYD{_JWHN0FOiqaE9J}Nb@FxcX8AVxZtN=4%O1{K$cj>7Aj`|x
zmhF(v@`3!}9TnOc;5CIGV$9>J1RFTs3vEn;IR3CF8ksJ6^Bha9Z}{+`tZBQ68^Y^Y
zH;WrC;DM~^mN)+|0nGB}2e5~CK!rcAVz2Cg1OEJXY~D`Oq5%E~PqW4c@jGb12SI$9
z04+_^g85?tnkz7bXNR!+0D|K9AmKjX;D6QpFsF4Gz8#<hNwytKYvcIETy<9(!_a*L
zzn<am8s3WA#yc_{$Q<g!JV$0NKD@s2a(88zu9c2VATmj-9GPfj&TesJ#vrq}db=Yv
z38|am0*BBg$mDeh9hhavTz%rmY(OUGbq;Mr41EM)m=<KR!W@~;k?{z(Gf@V7t46y{
zuD><CP>>wVF%<$hJDK-}$T#_ytRfsDlK5k6LO66L@t18_3^6Huqc9=d(x*e=b_(yu
z&IyMXDSVLkssBoV&e3DhxziFP2qIGX15~(^$_Is%McC`1HIH>;nAJ8$$n;hiZVF4o
z6zs7GT1F6Toxlgf>2bUpKK=89AU>Vv;q$ln>;Gk-ql~_o_iK#iAS;6pOAj7t%}2k<
zFw92Gw`i0jV?<_Tlp}K#nY=#CMP!D>z^M$JL&qXaof&+zKzK05I>R7g0?#QD#E#9<
zxiidd8)Hqp3K^}$Zewrg!5FBTfIX#=_O{avmSpm)dYP6<*z)lcd7V%rwdSinilIKi
zuc5C-{sJ;Sc$;~}JVfS5AI2FsKvw2xBSL0OA4ZDI={`&{GTnWcf+0vvmfHi_TY@bp
zdz-&3^i^2rNI>q)vht#NMFu2nb=ggQ6{f|L_(Xxb$fCkcO%MTI6ZtrBnZjRX$0@9R
zfh~`MiZp&89m>qfJO|^Z;tWM~!ZI8OME#$z>!#Uc#FA+!Uq#+F{(0~4Ty=`ln%_DM
zvVIH`sd8jeklEUYnT|}m+R<hXGE+5<%yMMT^kLQ^Gcdu?W*aj6pf??<R-~fegzk6v
zpz1f095t6vliP>6kIaXC7y+)^?qo-=;mBmAI5H|^hK+S(GLiW#-I1Av%(d#b9H|PV
zn#MUYb;v|yI5L}&xisF9F(Pw!k|T2*nV%**GS`tAH`U6py(=6?$!9wMLYS9pTSU>>
zxQKS<+U@9C^%#H~Y#+uKnV3AgjeS1l<$^97N4`Cuj=VqQ&fuLxI`OM4T@FGfH#c`y
zp`ld!0KfQJ7l_>v9oEd?U$DLl?NcTq2{R-tv>VbY-bN;;($3gj(dBFox}L4HyJ|i}
z!;$#;+?tiTHX{>R<;cV$Goud^g3QV)2+8A9(i?3W>vnzxH7nk?C#Lb*k-6W8`4yP~
z_!<7y!tX&Qtr}YMaEXjw3fB><zgy;L5r%&Y`LA$fB*?V&Vd9Z#Ugc<$j!frjM`j8#
z%WLh7y<^T=x{9vpn>g_Jn9DG*NXtKDKd-f}Tg1A29IfCwi|ig;M?+AD;czaQ9}0(O
z@~O~SfID7NopmpHJ-2wCUaQBOtHqYy@9gQU4E2^dc=r^dcU50+9fQOlCV-Wp-VqMo
z9y9ULWS6x(id$#WZN(-dqFe&pY&3GIx3&p!!)!DPsHd|bDC9i;z4U5Gc40>i!@rIC
zPCm44E#@x^l3?y^-XHh4h#%3e3jeiw<=KJE{<U_dx6L2G<r2&m_95(j7l*l{0nSq#
z-w53lOV@#)4iWXEb^Lzz*g7bi!%HD#4xh@NvIte|MH?BUNAjjkXmJz*OHtEq(`=@~
zFE+ui423S6u#pNcZGz8S6gUETbNMRPgIMzpEJxDYCNxkXz$WycheEJTSVM(Ko8V?Z
zL246fsGzY4PV-SnB9J*BQ;f5b?0ZN~wh2q9kZlussDOVJS$d#q0pGyti1q#wU4c&}
z4#HTNu#j)0jP3rhp%R~2TM0N-@<EC-#5xSt+sGGQ40EFo^BpqzO@ACJ43<}k+k~OX
zI#CdpEW#nd7v$*oaY$xYVRd%l0TpU2nku%zW^wm@EO}#-wd95sd;*kJ@GfwBF;2ff
z($4VLYHUG^Em=#GNw<VQk59?#E!jN|uc!6V={`dM4F$X}V8A5Hz14Jj8DA-2JvUk!
z4|&sg7ghwlS#?y?vw|<7WXVdzFo4SxqX80EAu0g&Qp8tnztxDT0IMiw0z9QS4Irlm
zF%RG*#n}L|TEsGdZ4@g2`qv>Y0jQ){1Mq-i1Hjw$h#LXgD7FAZtU=rbrVVTOIyXAo
zf&gbb21o&Xay_-q<gpQ-&uFC4AE6~q;oTqMT)|9X%_!qsZEEJFG~&r-<gq2Gn{Z69
zvX`6qwcZ}KakcKkhwyDI8er>YOtA~#2t``kW<G@uT+|knMOfn&eww!e?Bkz1r)W+=
z*+K^AcH0&{#XGW3O!H8N!EyH8iZO5|=WWFp(*Ra%<vZw9)ql)ac`JIKs_7QG*Pmf#
z1N3~1&)XN*^=7gBp;W-&Qk1svEp)wHZowAea-RGNwiM^kVT!oiBDY}<Ttb=Ku!}MQ
zd_Kh<!1X+iB5n}NKINy;HF}fExR3^J$9M?<2ezY}il0v?iWDH)!LOyOZr=`+acmw?
Txdq_8ooJs;OunD-(%1eEOPd`f

diff --git a/readme.md b/readme.md
index e78f471..f54d2d9 100644
--- a/readme.md
+++ b/readme.md
@@ -14,10 +14,10 @@ Lua scripting for Blockland
 ### From TorqueScript
 `'print('hello world')` - Execute Lua in the console by prepending a `'` (single quote)  
 `luaeval("code");` - Execute Lua code  
-`luacall("funcName", %args...);` - Call a Lua global function  
-`luaexec("fileName");` - Execute a Lua file. Path rules are the same as executing .cs files.  
-`luaget("varName");` - Read a Lua global variable  
-`luaset("varName", %value);` - Write a Lua global variable  
+`luacall("funcName", %args...);` - Call a Lua function (supports indexing tables and object methods)  
+`luaexec("fileName");` - Execute a Lua file. Path rules are the same as when executing .cs files, relative paths are allowed.  
+`luaget("varName");` - Read a Lua global variable (supports indexing tables)  
+`luaset("varName", %value);` - Write a Lua global variable (supports indexing tables)  
 
 ### From Lua
 `bl.eval('code')` - Eval TorqueScript code  
@@ -35,7 +35,7 @@ Lua scripting for Blockland
 `object.key = value` - Associate Lua data with a Torque object  
 `object:method(args)` - Call a Torque object method  
 `object[index]` - Access a member of a Torque set or group  
-`for childIndex, child in object:members() do` - Iterate objects within of a Torque set or group. Indices start at 0 like in Torque.
+`for child in object:members() do` - Iterate objects within of a Torque set or group. Indices start at 0 like in Torque.
 `bl.isObject(object, objectID, or 'objectName')` - Check if an object exists  
 `object:exists()` - Check if an object exists  
 
@@ -49,14 +49,14 @@ Lua scripting for Blockland
 `for object in bl.radiusSearch(vector{centerX,y,z}, radius, 'objtype'/{'objtypes',...}) do` - Find all objects of the specified type(s) whose bounding box overlaps with the specified sphere. See the Types section for a list of valid object types.  
 
 ### Server-Client Communication
-`bl.addServerCmd('commandName', function(client, args...) yourCode end)` - Register a /command on the server  
-`bl.addClientCmd('commandName', function(args...) yourCode end)` - Register a client command on the client  
+`bl.addServerCmd('commandName', function(client, args...) ... end)` - Register a /command on the server  
+`bl.addClientCmd('commandName', function(args...) ... end)` - Register a client command on the client  
 `bl.commandToServer('commandName', args...)` - Execute a server command as a client  
 `bl.commandToClient('commandName', args...)` - As the server, execute a client command on a specific client  
 `bl.commandToAll('commandName', args...)` - As the server, execute a client command on all clients  
 
 ### Packages/Hooks
-`bl.hook('packageName', 'functionName', 'before'/'after', function(args) yourCode end)` - Hook a Torque function with a Lua function.  
+`bl.hook('packageName', 'functionName', 'before'/'after', function(args) ... end)` - Hook a Torque function with a Lua function.  
 `args` is an array containing the arguments provided to the function. If the hook is `before`, these can be modified before being passed to the parent function.  
 If `args._return` is set to anything other than nil by a `before` hook, the parent function will not be called, and the function will simply return that value. Also in this case, any `after` hook will not be executed.  
 In an `after` hook, `args._return` is set to the value returned by the parent function, and can be modified.  
@@ -195,7 +195,8 @@ All Lua code is sandboxed, and file access is confined to the default directorie
 BlockLua also has access to any C libraries installed in the `modules/lualib` folder, so be careful throwing things in there.  
 ### Unsafe Mode
 BlockLua can be built in Unsafe Mode by specifying the `-DBLLUA_UNSAFE` compiler flag. This removes the sandboxing of Lua code, allowing it to access any file and use any library, including ffi.  
-Please do not publish add-ons that require unsafe mode.  
+A more limited option is `-DBLLUA_ALLOWFFI`, which allows the use of the `ffi` library. This can still be exploited to grant all the same access as full unsafe mode.  
+Please do not publish add-ons that require either of these.  
 
 ### List of Object Types
 `'all'` - Any object  
@@ -210,6 +211,6 @@ Other types: `'static'`, `'environment'`, `'terrain'`, `'water'`, `'trigger'`, `
 ## Compiling
 
 With any *32-bit* variant of GCC installed (such as MinGW or MSYS2), run the following command in the repo directory:  
-`g++ src/bllua4.cpp -o BlockLua.dll -m32 -shared -static-libgcc -Isrc -Iinc/tsfuncs -Iinc/lua -lpsapi -L. -llua5.1 src/bllua`  
-
+`g++ src/bllua4.cpp -o BlockLua.dll -m32 -shared -static-libgcc -Isrc -Iinc/tsfuncs -Iinc/lua -lpsapi -L. -llua5.1`  
+  
 LuaJIT (lua5.1.dll) can be obtained from https://luajit.org/  
diff --git a/src/bllua4.cpp b/src/bllua4.cpp
index 5e1d94b..3d184b1 100644
--- a/src/bllua4.cpp
+++ b/src/bllua4.cpp
@@ -1,4 +1,4 @@
-// BlockLua (bllua4): Simple Lua interface for TorqueScript
+// BlockLua (bllua4): Advanced Lua interface for TorqueScript
 
 // Includes
 
@@ -57,22 +57,26 @@ bool init() {
 	
 	// Set up Lua environment
 	BLL_LOAD_LUA(gL, bll_fileLuaEnv);
+	#ifdef BLLUA_ALLOWFFI
+		lua_pushboolean(gL, true);
+		lua_setglobal(gL, "_bllua_allowffi");
+	#endif
 	#ifndef BLLUA_UNSAFE
 		BLL_LOAD_LUA(gL, bll_fileLuaEnvSafe);
 	#endif
 	
-	// Expose Lua API to TS
-	BlAddFunction(NULL, NULL, "_bllua_luacall", bll_ts_luacall, "LuaCall(name, ...) - Call Lua function and return result", 2, 20);
-	BlEval(bll_fileTsEnv);
-	
-	// Load utilities
+	// Load utilities in Lua
 	BLL_LOAD_LUA(gL, bll_fileLuaStd);
 	BLL_LOAD_LUA(gL, bll_fileLuaVector);
 	BLL_LOAD_LUA(gL, bll_fileLuaMatrix);
 	BLL_LOAD_LUA(gL, bll_fileLuaLibts);
-	BlEval(bll_fileTsLibts);
 	BLL_LOAD_LUA(gL, bll_fileLuaLibbl);
 	BLL_LOAD_LUA(gL, bll_fileLuaLibblTypes);
+	
+	// Expose Lua API to TS
+	BlAddFunction(NULL, NULL, "_bllua_luacall", bll_ts_luacall, "LuaCall(name, ...) - Call Lua function and return result", 2, 20);
+	BlEval(bll_fileTsEnv);
+	BlEval(bll_fileTsLibts);
 	BlEval(bll_fileTsLibblSupport);
 	BlEval(bll_fileLoadaddons);
 	
@@ -85,8 +89,7 @@ bool init() {
 bool deinit() {
 	BlPrintf("BlockLua: Unloading");
 	
-	BlEval("deactivatePackage(_bllua_main);");
-	BlEval("$_bllua_active = 0;");
+	BlEval("$_bllua_active=0;deactivatePackage(_bllua_main);");
 	bll_LuaEval(gL, "for _,f in pairs(_bllua_on_unload) do f() end");
 	
 	lua_close(gL);
diff --git a/src/lua-env-safe.lua b/src/lua-env-safe.lua
index adb5275..63c61a9 100644
--- a/src/lua-env-safe.lua
+++ b/src/lua-env-safe.lua
@@ -12,6 +12,7 @@ local old_require = require
 local old_os = os
 local old_debug = debug
 local old_package = package
+local old_allowffi = _bllua_allowffi
 
 -- Remove all global variables except a whitelist
 local ok_names = tmap {
@@ -37,13 +38,10 @@ end
 
 -- Sanitize file paths to point only to allowed files within the game directory
 -- List of allowed directories for reading/writing
+-- modules/lualib is also allowed as read-only
 local allowed_dirs = tmap {
 	'add-ons', 'base', 'config', 'saves', 'screenshots', 'shaders'
 }
--- List of allowed directories for reading only
-local allowed_dirs_readonly = tmap {
-	'lualib'
-}
 -- List of disallowed file extensions - basically executable file extensions
 -- Note that even without this protection, exploiting would still require somehow
 --   getting a file within the allowed directories to autorun,
@@ -79,14 +77,15 @@ local function safe_path(fn, readonly)
 	end
 	-- allow only whitelisted dirs
 	local dir = fn:match('^([^/]+)/')
-	if (not dir) or (
-		(not allowed_dirs[dir:lower()]) and
-		((not readonly) or (not allowed_dirs_readonly[dir:lower()])) ) then
-		return nil, 'filename is in disallowed directory '..(dir or 'nil')
+	if not (dir and (
+		allowed_dirs[dir:lower()] or
+		( readonly and fn:find('^modules/lualib/') ) ))
+	then
+		return nil, 'File is in disallowed directory '..(dir or 'nil')
 	end
-	-- disallow blacklisted extensions or no extension
+	-- disallow blacklisted extensions
 	local ext = fn:match('%.([^/%.]+)$')
-	if (not ext) or (disallowed_exts[ext:lower()]) then
+	if ext and disallowed_exts[ext:lower()] then
 		return nil, 'Filename \''..fn..'\' has disallowed extension \''..
 			(ext or '')..'\''
 	end
@@ -117,6 +116,7 @@ local disallowed_packages = tmap {
 	'ffi', 'debug', 'package', 'io', 'os',
 	'_bllua_ts',
 }
+if old_allowffi then disallowed_packages['ffi'] = nil end
 function _bllua_requiresecure(name)
 	if name:find('[^a-zA-Z0-9_%-%.]') or name:find('%.%.') or
 		name:find('^%.') or name:find('%.$') then
diff --git a/src/lua-env.lua b/src/lua-env.lua
index e16f7c2..d129e88 100644
--- a/src/lua-env.lua
+++ b/src/lua-env.lua
@@ -37,5 +37,9 @@ function _bllua_on_error(err)
 	return table.concat(tracelines, '\n')
 end
 
+-- overridden in lua-env-safe.lua (executed if not BLLUA_UNSAFE)
+_bllua_io_open = io.open
+_bllua_requiresecure = require
+
 print = _bllua_ts.echo
 print('  Executed bllua-env.lua')
diff --git a/src/util/libbl.lua b/src/util/libbl.lua
index 52195df..878522a 100644
--- a/src/util/libbl.lua
+++ b/src/util/libbl.lua
@@ -107,13 +107,14 @@ end
 
 -- Type conversion from TS to Lua
 local fromTsForceTypes = {
-	['boolean'] = tsBool,
-	['object'] = function(val) toTsObject(val) end, -- wrap because toTsObject not defined yet
+	['boolean'] = function(val) return tsBool(val) end,
+	['object'] = function(val) return toTsObject(val) end, -- wrap because toTsObject not defined yet
 	['string'] = function(val) return val end,
 }
 local function forceValFromTs(val, typ)
-	return fromTsForceTypes[typ](val) or
-		error('valFromTs: invalid force type '..typ, 4)
+	local func = fromTsForceTypes[typ]
+	if not func then error('valFromTs: invalid force type \''..typ..'\'', 4) end
+	return func(val)
 end
 local function vectorFromTs(val)
 	local xS,yS,zS = val:match('^(%-?[0-9%.e]+) (%-?[0-9%.e]+) (%-?[0-9%.e]+)$')
@@ -154,7 +155,8 @@ local function multinumericFromTs(val)
 	end
 end
 bl._forceType = bl._forceType or {}
-local function valFromTs(val, name, name2) -- todo: ensure name and name2 are already lowercase
+-- todo: ensure name and name2 are already lowercase
+local function valFromTs(val, name, name2)
 	if type(val)~='string' then
 		error('valFromTs: expected string, got '..type(val), 3) end
 	if name then
@@ -362,17 +364,19 @@ local tsObjectMeta = {
 				tsIsFunctionNs(rawget(t,'_tsNamespace'), name) or
 				tsIsFunctionNs(rawget(t,'_tsName'), name)
 			then
-				return function(t, ...)
-					local args = {...}
-					local argsS = arglistToTs(args)
-					return valFromTs(
-						_bllua_ts.callobj(rawget(t,'_tsObjectId'), name, unpack(argsS)),
-						rawget(t,'_tsName') and rawget(t,'_tsName')..'::'..name,
-						rawget(t,'_tsNamespace')..'::'..name)
+				return function(t2, ...)
+					if t2==nil or type(t2)~='table' or not t2._tsObjectId then
+						error('ts object method: be sure to use :func() not .func()', 2) end
+					local argsS = arglistToTs({...})
+					local res =
+						_bllua_ts.callobj(t2._tsObjectId, name, unpack(argsS))
+					return valFromTs(res,
+						t2._tsName and t2._tsName..'::'..name,
+						t2._tsNamespace..'::'..name)
 				end
 			else
-				return valFromTs(
-					_bllua_ts.getfield(rawget(t,'_tsObjectId'), name),
+				local res = _bllua_ts.getfield(rawget(t,'_tsObjectId'), name)
+				return valFromTs(res,
 					rawget(t,'_tsName') and rawget(t,'_tsName')..'.'..name,
 					rawget(t,'_tsNamespace')..'.'..name)
 			end
@@ -437,7 +441,8 @@ local tsObjectMeta = {
 				local obj = toTsObject(_bllua_ts.callobj(t._tsObjectId,
 					'getObject', tostring(idx)))
 				idx = idx+1
-				return idx-1, obj
+				--return idx-1, obj
+				return obj
 			else
 				return nil
 			end
@@ -559,9 +564,9 @@ local function tsNamespacedCallTfname(name)
 end
 local function tsCallGen(name)
 	return function(...)
-		local args = {...}
-		local argsS = arglistToTs(args)
-		return valFromTs(_bllua_ts.call(name, unpack(argsS)), name)
+		local argsS = arglistToTs({...})
+		local res = _bllua_ts.call(name, unpack(argsS))
+		return valFromTs(res, name)
 	end
 end
 
@@ -587,14 +592,16 @@ local tsMeta = {
 				if not rest:find('::') and tsIsFunctionNs(ns, rest) then
 					return tsCallGen(tsNamespacedCallTfname(name))
 				else
-					return valFromTs(_bllua_ts.getvar(name), name)
+					local res = _bllua_ts.getvar(name)
+					return valFromTs(res, name)
 				end
 			elseif tsIsFunction(name) then
 				return tsCallGen(name)
 			elseif tsIsObject(name) then
 				return toTsObject(name)
 			else
-				return valFromTs(_bllua_ts.getvar(name), name)
+				local res = _bllua_ts.getvar(name)
+				return valFromTs(res, name)
 			end
 		end
 	end,
@@ -613,10 +620,12 @@ function bl.call(func, ...)
 	return _bllua_ts.call(func, unpack(argsS))
 end
 function bl.eval(code)
-	return valFromTs(_bllua_ts.eval(code))
+	local res = _bllua_ts.eval(code)
+	return valFromTs(res)
 end
 function bl.exec(file)
-	return valFromTs(_bllua_ts.call('exec', file))
+	local res = _bllua_ts.call('exec', file)
+	return valFromTs(res)
 end
 function bl.array(name, ...)
 	local rest = {...}
@@ -645,7 +654,6 @@ end
 -- Lua calling from TS
 local luaLookup
 luaLookup = function(tbl, name, set, val)
-	print('lookup', tbl, name, set, val)
 	if name:find('%.') then
 		local first, rest = name:match('^([^%.:]+)%.(.+)$')
 		if not isValidFuncName(first) then
@@ -661,6 +669,8 @@ luaLookup = function(tbl, name, set, val)
 			error('luacall: cannot have : or . after :', 3) end
 		if not isValidFuncName(first) then
 			error('luacall: invalid name \''..tostring(first)..'\'', 3) end
+		if not isValidFuncName(rest) then
+			error('luacall: invalid method name \''..tostring(first)..'\'', 3) end
 		if not tbl[first] then
 			error('luacall: no object named \''..rest..'\'', 3) end
 		if not tbl[first][rest] then
@@ -681,7 +691,7 @@ function _bllua_call(fname, ...)
 	local args = arglistFromTs(fname:lower(), {...}) -- todo: separate lua from ts func names?
 	local func = luaLookup(_G, fname)
 	if not func then
-		error('luacall: no global in lua named \''..name..'\'', 2) end
+		error('luacall: no global in lua named \''..fname..'\'', 2) end
 	local res = func(unpack(args))
 	return valToTs(res)
 end
diff --git a/src/util/libts-lua.lua b/src/util/libts-lua.lua
index 56f4a9d..149d2b9 100644
--- a/src/util/libts-lua.lua
+++ b/src/util/libts-lua.lua
@@ -89,11 +89,12 @@ local allowed_zip_dirs = tflip{
 local function io_open_absolute(fn, mode)
 	-- if file exists, use original mode
 	local res, err = _bllua_io_open(fn, mode)
-	if res then return res end
+	if res then return res
+	elseif err and not err:find('No such file or directory$') then return nil, err end
 	
 	-- otherwise, if TS sees file but Lua doesn't, it must be in a zip, so use TS reader
 	local dir = fn:match('^[^/]+')
-	if not allowed_zip_dirs[dir:lower()] then return nil, 'File is not in one of the allowed directories' end
+	if not allowed_zip_dirs[dir:lower()] then return nil, 'Zip is not in one of the allowed directories' end
 	local exist = _bllua_ts.call('isFile', fn) == '1'
 	if not exist then return nil, err end
 	
diff --git a/src/util/std.lua b/src/util/std.lua
index ca79eea..53e9e84 100644
--- a/src/util/std.lua
+++ b/src/util/std.lua
@@ -179,7 +179,7 @@ valueToString = function(v, tabLevel, seen)
 		return tostring(v)
 	else
 		--error('table.tostring: table contains a '..t..' value, cannot serialize')
-		return 'nil --[[ cannot serialize '..tostring(v)..' ]]'
+		return 'nil --[[ '..tostring(v)..' ]]'
 	end
 end
 function table.tostring(t)