@procedures/store 0.0.0-stage → 0.2.0

package/dist/storage/procedures.js

@@ -0,0 +1,101 @@
+/**
+ * procedure.register: register a procedure at run time, from a handler reference.
+ *
+ * With `persist`, the procedure goes into the store of a synced registry (`createSyncedRegistry()`),
+ * and only with a handler that the store's loader allows: never a stub (deep dive CORE-16). Without
+ * a store, `persist` fails with the code NOT_CONFIGURED.
+ *
+ * The programs of `procedure.define` have their own store: `procedure.store`, `load` and `sync`
+ * (../program-store/procedures.ts, roadmap 3.2).
+ */
+import { defineProcedure } from "@procedures/client";
+import { PROCEDURE_REGISTRY } from "@procedures/client";
+import { pathToKey } from "@procedures/client";
+import { deserializeProcedure, deserializeProcedureSync } from "./serialization.js";
+import { getProcedureStore } from "./synced-registry.js";
+import { ProcedureStoreError } from "../errors.js";
+// =============================================================================
+// Any Schema Helper
+// =============================================================================
+const anySchema = {
+    parse: (data) => data,
+    safeParse: (data) => ({ success: true, data }),
+    _output: undefined,
+};
+// =============================================================================
+// The store of the caller
+// =============================================================================
+export { ProcedureStoreError } from "../errors.js";
+/** The registry of the caller: the context's registry when it has one, else the global one. */
+function callerRegistry(ctx) {
+    return ctx?.registry ?? PROCEDURE_REGISTRY;
+}
+/** The store of the caller's registry, or a NOT_CONFIGURED error. */
+function requireStore(ctx, what) {
+    const store = getProcedureStore(callerRegistry(ctx));
+    if (!store) {
+        throw new ProcedureStoreError("NOT_CONFIGURED", `${what} needs a procedure store, and this registry has none. ` +
+            "Wrap the registry with createSyncedRegistry() or new SyncedProcedureRegistry().");
+    }
+    return store;
+}
+export const procedureRegisterProcedure = defineProcedure({
+    path: ["procedure", "register"],
+    input: anySchema,
+    output: anySchema,
+    metadata: {
+        description: "Register a procedure at runtime",
+        tags: ["procedure", "registry", "storage"],
+        // It never replaces a registered procedure. With `persist`, it writes the record to the
+        // store of the synced registry, over a stored record of the same key.
+        effects: { reads: ["registry"], writes: ["registry"] },
+    },
+    handler: async (input, ctx) => {
+        const { path, metadata = {}, streaming, handlerRef, persist = false } = input;
+        const key = pathToKey(path);
+        const serialized = {
+            path,
+            metadata,
+            streaming,
+            handlerRef,
+            storedAt: Date.now(),
+        };
+        if (persist) {
+            // A stored procedure needs a handler: never store a stub (deep dive CORE-16)
+            const store = requireStore(ctx, "procedure.register with persist");
+            const loader = store.getHandlerLoader();
+            const procedure = handlerRef && loader ? await deserializeProcedure(serialized, { handlerLoader: loader }) : undefined;
+            if (!procedure?.handler) {
+                throw new ProcedureStoreError("NO_HANDLER", `procedure.register with persist needs a handler for ${key}: give a handlerRef ` +
+                    "that the handler loader of the store allows.");
+            }
+            store.register(procedure, { override: false, handlerRef });
+            await store.flushWrites();
+            return { success: true, message: `Registered and stored ${key}`, path, hasHandler: true };
+        }
+        // No persist: load the handler when the store's loader allows it, else declare a stub
+        const loader = getProcedureStore(callerRegistry(ctx))?.getHandlerLoader();
+        const procedure = handlerRef && loader ? await deserializeProcedure(serialized, { handlerLoader: loader }) : deserializeProcedureSync(serialized);
+        try {
+            callerRegistry(ctx).register(procedure, { override: false });
+        }
+        catch (error) {
+            return {
+                success: false,
+                message: error instanceof Error ? error.message : "Registration failed",
+                path,
+                hasHandler: false,
+            };
+        }
+        const hasHandler = typeof procedure.handler === "function";
+        return {
+            success: true,
+            message: hasHandler
+                ? `Registered ${key}`
+                : `Registered ${key} with no handler: a Client sends the calls of this path to its transport`,
+            path,
+            hasHandler,
+        };
+    },
+});
+//# sourceMappingURL=procedures.js.map

package/dist/storage/procedures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"procedures.js","sourceRoot":"","sources":["../../src/storage/procedures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,kBAAkB,EAA0B,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAgC,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,MAAM,SAAS,GAIX;IACF,KAAK,EAAE,CAAC,IAAa,EAAE,EAAE,CAAC,IAAI;IAC9B,SAAS,EAAE,CAAC,IAAa,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,IAAI,EAAE,CAAC;IAChE,OAAO,EAAE,SAAoB;CAC9B,CAAC;AAEF,gFAAgF;AAChF,0BAA0B;AAC1B,gFAAgF;AAEhF,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,+FAA+F;AAC/F,SAAS,cAAc,CAAC,GAAiC;IACvD,OAAQ,GAAyE,EAAE,QAAQ,IAAI,kBAAkB,CAAC;AACpH,CAAC;AAED,qEAAqE;AACrE,SAAS,YAAY,CAAC,GAAiC,EAAE,IAAY;IACnE,MAAM,KAAK,GAAG,iBAAiB,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,mBAAmB,CAC3B,gBAAgB,EAChB,GAAG,IAAI,wDAAwD;YAC7D,iFAAiF,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AA4BD,MAAM,CAAC,MAAM,0BAA0B,GAAiB,eAAe,CAAC;IACtE,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;IAC/B,KAAK,EAAE,SAAgB;IACvB,MAAM,EAAE,SAAgB;IACxB,QAAQ,EAAE;QACR,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC;QAC1C,wFAAwF;QACxF,sEAAsE;QACtE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE;KACvD;IACD,OAAO,EAAE,KAAK,EAAE,KAAoB,EAAE,GAAqB,EAA2B,EAAE;QACtF,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC;QAC9E,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAwB;YACtC,IAAI;YACJ,QAAQ;YACR,SAAS;YACT,UAAU;YACV,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,6EAA6E;YAC7E,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,KAAK,CAAC,gBAAgB,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,UAAU,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvH,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,uDAAuD,GAAG,sBAAsB;oBAC9E,8CAA8C,CACjD,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAC3D,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,yBAAyB,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC5F,CAAC;QAED,sFAAsF;QACtF,MAAM,MAAM,GAAG,iBAAiB,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;QAC1E,MAAM,SAAS,GACb,UAAU,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAClI,IAAI,CAAC;YACH,cAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB;gBACvE,IAAI;gBACJ,UAAU,EAAE,KAAK;aAClB,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,SAAS,CAAC,OAAO,KAAK,UAAU,CAAC;QAC3D,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,UAAU;gBACjB,CAAC,CAAC,cAAc,GAAG,EAAE;gBACrB,CAAC,CAAC,cAAc,GAAG,0EAA0E;YAC/F,IAAI;YACJ,UAAU;SACX,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/storage/serialization.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Procedure Serialization
+ *
+ * Utilities for converting procedures to/from serialized format.
+ * Enables storage and transmission of procedure definitions.
+ */
+import type { AnyProcedure, ProcedurePath } from "@procedures/client";
+import type { SerializedProcedure, HandlerReference, HandlerLoader } from "./types.js";
+/**
+ * Options for serializing a procedure.
+ */
+export interface SerializeOptions {
+    /** Handler reference to store (optional, handlers can't be serialized directly) */
+    handlerRef?: HandlerReference | undefined;
+    /** Whether to include version info */
+    includeVersion?: boolean | undefined;
+}
+/**
+ * Serialize a procedure to storable format.
+ *
+ * Note: Handler functions cannot be serialized. If the procedure has a handler,
+ * you should provide a `handlerRef` that can be used to load it later.
+ *
+ * @param procedure - Procedure to serialize
+ * @param options - Serialization options
+ * @returns Serialized procedure definition
+ *
+ * @example
+ * ```typescript
+ * const serialized = serializeProcedure(myProcedure, {
+ *   handlerRef: {
+ *     module: "@procedures/cli-run",
+ *     export: "libScanHandler",
+ *   },
+ * });
+ * ```
+ */
+export declare function serializeProcedure(procedure: AnyProcedure, options?: SerializeOptions): SerializedProcedure;
+/**
+ * Options for deserializing a procedure.
+ */
+export interface DeserializeOptions {
+    /** Handler loader to restore handlers from references */
+    handlerLoader?: HandlerLoader | undefined;
+}
+/**
+ * Deserialize a procedure from stored format.
+ *
+ * Returns a stub procedure without a handler unless a handlerLoader is provided
+ * and the serialized procedure has a handlerRef.
+ *
+ * @param data - Serialized procedure data
+ * @param options - Deserialization options
+ * @returns Procedure (stub if no handler can be loaded)
+ *
+ * @example
+ * ```typescript
+ * // Deserialize as stub (no handler)
+ * const stub = await deserializeProcedure(data);
+ *
+ * // Deserialize with handler loading
+ * const proc = await deserializeProcedure(data, {
+ *   handlerLoader: myLoader,
+ * });
+ * ```
+ */
+export declare function deserializeProcedure(data: SerializedProcedure, options?: DeserializeOptions): Promise<AnyProcedure>;
+/**
+ * Synchronous version that always returns a stub.
+ * Use when you don't need to load handlers.
+ */
+export declare function deserializeProcedureSync(data: SerializedProcedure): AnyProcedure;
+/**
+ * Get the storage key (ID) for a procedure.
+ * Uses the dot-separated path as the key.
+ *
+ * @param pathOrProcedure - Procedure path or procedure object
+ * @returns Storage key string
+ */
+export declare function getProcedureKey(pathOrProcedure: ProcedurePath | AnyProcedure): string;
+/**
+ * Get the storage key from a serialized procedure.
+ */
+export declare function getSerializedKey(data: SerializedProcedure): string;
+/**
+ * Serialize multiple procedures.
+ *
+ * @param procedures - Procedures to serialize
+ * @param options - Serialization options
+ * @returns Array of [key, serialized] tuples for batch storage
+ */
+export declare function serializeProcedures(procedures: AnyProcedure[], options?: SerializeOptions): Array<[string, SerializedProcedure]>;
+/**
+ * Deserialize multiple procedures.
+ *
+ * @param items - Array of serialized procedures
+ * @param options - Deserialization options
+ * @returns Array of procedures
+ */
+export declare function deserializeProcedures(items: SerializedProcedure[], options?: DeserializeOptions): Promise<AnyProcedure[]>;
+/**
+ * Create a handler loader using dynamic imports of the allowed modules only.
+ *
+ * A stored procedure record names the module of its handler, and the storage can be remote
+ * (`api`, `hybrid`). So the loader imports only the modules in `allowedModules` (exact package
+ * names, or a prefix that ends with "*"), and never a URL or a path (`data:`, `file:`, `node:`,
+ * `./x`, `/x`, a drive letter). Before, it imported any module that a record named: a record
+ * with `node:child_process` ran a shell command (BUGS-2026-07 M11, deep dive CORE-7, DATA-11).
+ *
+ * @param allowedModules - Module names the loader may import, such as "@procedures/git"
+ * @returns Handler loader that uses import() to load allowed modules
+ *
+ * @example
+ * ```typescript
+ * const loader = createDynamicHandlerLoader(["@procedures/*"]);
+ * const handler = await loader.load({
+ *   module: "@procedures/cli-run",
+ *   export: "libScanHandler",
+ * });
+ * ```
+ */
+export declare function createDynamicHandlerLoader(allowedModules: readonly string[]): HandlerLoader;
+//# sourceMappingURL=serialization.d.ts.map

package/dist/storage/serialization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialization.d.ts","sourceRoot":"","sources":["../../src/storage/serialization.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAwBvF;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mFAAmF;IACnF,UAAU,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAE1C,sCAAsC;IACtC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,YAAY,EACvB,OAAO,GAAE,gBAAqB,GAC7B,mBAAmB,CAuBrB;AAMD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CAC3C;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,mBAAmB,EACzB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,YAAY,CAAC,CA0BvB;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,mBAAmB,GAAG,YAAY,CAahF;AAMD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,eAAe,EAAE,aAAa,GAAG,YAAY,GAAG,MAAM,CAGrF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAElE;AAMD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,YAAY,EAAE,EAC1B,OAAO,GAAE,gBAAqB,GAC7B,KAAK,CAAC,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAKtC;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,mBAAmB,EAAE,EAC5B,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,YAAY,EAAE,CAAC,CAEzB;AAMD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,0BAA0B,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa,CAwB3F"}

package/dist/storage/serialization.js

@@ -0,0 +1,216 @@
+/**
+ * Procedure Serialization
+ *
+ * Utilities for converting procedures to/from serialized format.
+ * Enables storage and transmission of procedure definitions.
+ */
+import { pathToKey } from "@procedures/client";
+// =============================================================================
+// Any Schema (for deserialized procedures without schemas)
+// =============================================================================
+/**
+ * Passthrough schema that accepts any value.
+ * Used for deserialized procedures where original schemas aren't available.
+ */
+const anySchema = {
+    parse: (data) => data,
+    safeParse: (data) => ({ success: true, data }),
+    _output: undefined,
+};
+/**
+ * Serialize a procedure to storable format.
+ *
+ * Note: Handler functions cannot be serialized. If the procedure has a handler,
+ * you should provide a `handlerRef` that can be used to load it later.
+ *
+ * @param procedure - Procedure to serialize
+ * @param options - Serialization options
+ * @returns Serialized procedure definition
+ *
+ * @example
+ * ```typescript
+ * const serialized = serializeProcedure(myProcedure, {
+ *   handlerRef: {
+ *     module: "@procedures/cli-run",
+ *     export: "libScanHandler",
+ *   },
+ * });
+ * ```
+ */
+export function serializeProcedure(procedure, options = {}) {
+    const serialized = {
+        path: procedure.path,
+        metadata: { ...procedure.metadata },
+        storedAt: Date.now(),
+    };
+    // Only include streaming if explicitly set
+    if (procedure.streaming !== undefined) {
+        serialized.streaming = procedure.streaming;
+    }
+    // Include handler reference if provided
+    if (options.handlerRef) {
+        serialized.handlerRef = options.handlerRef;
+    }
+    // Include version if requested
+    if (options.includeVersion) {
+        serialized.version = 1;
+    }
+    return serialized;
+}
+/**
+ * Deserialize a procedure from stored format.
+ *
+ * Returns a stub procedure without a handler unless a handlerLoader is provided
+ * and the serialized procedure has a handlerRef.
+ *
+ * @param data - Serialized procedure data
+ * @param options - Deserialization options
+ * @returns Procedure (stub if no handler can be loaded)
+ *
+ * @example
+ * ```typescript
+ * // Deserialize as stub (no handler)
+ * const stub = await deserializeProcedure(data);
+ *
+ * // Deserialize with handler loading
+ * const proc = await deserializeProcedure(data, {
+ *   handlerLoader: myLoader,
+ * });
+ * ```
+ */
+export async function deserializeProcedure(data, options = {}) {
+    const procedure = {
+        path: data.path,
+        input: anySchema,
+        output: anySchema,
+        metadata: { ...data.metadata },
+    };
+    // Set streaming if present
+    if (data.streaming !== undefined) {
+        procedure.streaming = data.streaming;
+    }
+    // Try to load handler if reference exists and loader is provided
+    if (data.handlerRef && options.handlerLoader) {
+        try {
+            const handler = await options.handlerLoader.load(data.handlerRef);
+            if (handler && typeof handler === "function") {
+                procedure.handler = handler;
+            }
+        }
+        catch {
+            // Handler loading failed, procedure remains a stub
+        }
+    }
+    return procedure;
+}
+/**
+ * Synchronous version that always returns a stub.
+ * Use when you don't need to load handlers.
+ */
+export function deserializeProcedureSync(data) {
+    const procedure = {
+        path: data.path,
+        input: anySchema,
+        output: anySchema,
+        metadata: { ...data.metadata },
+    };
+    if (data.streaming !== undefined) {
+        procedure.streaming = data.streaming;
+    }
+    return procedure;
+}
+// =============================================================================
+// Storage Key Utilities
+// =============================================================================
+/**
+ * Get the storage key (ID) for a procedure.
+ * Uses the dot-separated path as the key.
+ *
+ * @param pathOrProcedure - Procedure path or procedure object
+ * @returns Storage key string
+ */
+export function getProcedureKey(pathOrProcedure) {
+    const path = Array.isArray(pathOrProcedure) ? pathOrProcedure : pathOrProcedure.path;
+    return pathToKey(path);
+}
+/**
+ * Get the storage key from a serialized procedure.
+ */
+export function getSerializedKey(data) {
+    return pathToKey(data.path);
+}
+// =============================================================================
+// Batch Operations
+// =============================================================================
+/**
+ * Serialize multiple procedures.
+ *
+ * @param procedures - Procedures to serialize
+ * @param options - Serialization options
+ * @returns Array of [key, serialized] tuples for batch storage
+ */
+export function serializeProcedures(procedures, options = {}) {
+    return procedures.map((proc) => [
+        getProcedureKey(proc),
+        serializeProcedure(proc, options),
+    ]);
+}
+/**
+ * Deserialize multiple procedures.
+ *
+ * @param items - Array of serialized procedures
+ * @param options - Deserialization options
+ * @returns Array of procedures
+ */
+export async function deserializeProcedures(items, options = {}) {
+    return Promise.all(items.map((item) => deserializeProcedure(item, options)));
+}
+// =============================================================================
+// Default Handler Loader
+// =============================================================================
+/**
+ * Create a handler loader using dynamic imports of the allowed modules only.
+ *
+ * A stored procedure record names the module of its handler, and the storage can be remote
+ * (`api`, `hybrid`). So the loader imports only the modules in `allowedModules` (exact package
+ * names, or a prefix that ends with "*"), and never a URL or a path (`data:`, `file:`, `node:`,
+ * `./x`, `/x`, a drive letter). Before, it imported any module that a record named: a record
+ * with `node:child_process` ran a shell command (BUGS-2026-07 M11, deep dive CORE-7, DATA-11).
+ *
+ * @param allowedModules - Module names the loader may import, such as "@procedures/git"
+ * @returns Handler loader that uses import() to load allowed modules
+ *
+ * @example
+ * ```typescript
+ * const loader = createDynamicHandlerLoader(["@procedures/*"]);
+ * const handler = await loader.load({
+ *   module: "@procedures/cli-run",
+ *   export: "libScanHandler",
+ * });
+ * ```
+ */
+export function createDynamicHandlerLoader(allowedModules) {
+    const allowed = (specifier) => {
+        // A URL scheme (data:, file:, node:, C:) or a relative or absolute path is never allowed
+        if (/^[a-z][a-z0-9+.-]*:/i.test(specifier) || /^[./\\]/.test(specifier)) {
+            return false;
+        }
+        return allowedModules.some((entry) => entry.endsWith("*") ? specifier.startsWith(entry.slice(0, -1)) : specifier === entry);
+    };
+    return {
+        async load(ref) {
+            if (!allowed(ref.module)) {
+                return undefined;
+            }
+            try {
+                // The specifier is checked against the allowlist above. A bundler cannot follow it.
+                const module = await import(/* @vite-ignore */ ref.module);
+                return module[ref.export];
+            }
+            catch {
+                return undefined;
+            }
+        },
+    };
+}
+//# sourceMappingURL=serialization.js.map

package/dist/storage/serialization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialization.js","sourceRoot":"","sources":["../../src/storage/serialization.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/C,gFAAgF;AAChF,2DAA2D;AAC3D,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,SAAS,GAIX;IACF,KAAK,EAAE,CAAC,IAAa,EAAE,EAAE,CAAC,IAAI;IAC9B,SAAS,EAAE,CAAC,IAAa,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,IAAI,EAAE,CAAC;IAChE,OAAO,EAAE,SAAoB;CAC9B,CAAC;AAiBF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAuB,EACvB,OAAO,GAAqB,EAAE;IAE9B,MAAM,UAAU,GAAwB;QACtC,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,QAAQ,EAAE,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE;QACnC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAC;IAEF,2CAA2C;IAC3C,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACtC,UAAU,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;IAC7C,CAAC;IAED,wCAAwC;IACxC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,UAAU,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAC7C,CAAC;IAED,+BAA+B;IAC/B,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAcD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAyB,EACzB,OAAO,GAAuB,EAAE;IAEhC,MAAM,SAAS,GAAiB;QAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE;KAC/B,CAAC;IAEF,2BAA2B;IAC3B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACvC,CAAC;IAED,iEAAiE;IACjE,IAAI,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClE,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;gBAC7C,SAAS,CAAC,OAAO,GAAG,OAAkC,CAAC;YACzD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAyB;IAChE,MAAM,SAAS,GAAiB;QAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE;KAC/B,CAAC;IAEF,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACvC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,eAA6C;IAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC;IACrF,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAyB;IACxD,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAA0B,EAC1B,OAAO,GAAqB,EAAE;IAE9B,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9B,eAAe,CAAC,IAAI,CAAC;QACrB,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAA4B,EAC5B,OAAO,GAAuB,EAAE;IAEhC,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,0BAA0B,CAAC,cAAiC;IAC1E,MAAM,OAAO,GAAG,CAAC,SAAiB,EAAW,EAAE;QAC7C,yFAAyF;QACzF,IAAI,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACxE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACnC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CACrF,CAAC;IACJ,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,GAAqB;YAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IAAI,CAAC;gBACH,oFAAoF;gBACpF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC3D,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}