pi-supernova 0.7.0 → 0.7.1

package/docs/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## Unreleased
 
+## [0.7.1] - 2026-09-17
+
+### Fixed
+
+- Guest worker links on hosts without `module.registerHooks` (Bun, Node <22.15):
+  `node:module` is now a namespace import with runtime feature detection, so the
+  `register` fallback — and hosts with neither hook mechanism — no longer fail at
+  module-eval time. Previously every program failed before its first command with
+  "Export named 'registerHooks' not found", e.g. under OMP/Bun.
+
 ## [0.7.0] - 2026-09-17
 
 ### Internals

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-supernova",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "CodeMode for Pi and OMP: read, edit, write and bash, with transactional files, source views and shared-input program batches.",
   "type": "module",
   "author": "AdityaVG13",

package/src/runtime/guest-worker.js

@@ -1,6 +1,6 @@
 import { parentPort } from "node:worker_threads";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { register, registerHooks } from "node:module";
+import * as nodeModule from "node:module";
 import { isString, isObject, isFunction, toPlain, looksLikePath } from "../shared/decode.js";
 import { truncateChars } from "../output/format.js";
 import { gatherReadArgs, normalizeRead, decodeReadValue, assertReadPaths } from "../contract/read.js";
@@ -8,6 +8,8 @@ import { classifyEdit } from "../contract/edit.js";
 import { normalizeBash } from "../contract/bash.js";
 import { guestImportMessage, isDeniedGuestImport } from "./guest-deny-imports.js";
 
+const { register, registerHooks } = nodeModule;
+
 if (isFunction(registerHooks)) {
   registerHooks({
     resolve(specifier, context, nextResolve) {
@@ -20,8 +22,13 @@ if (isFunction(registerHooks)) {
       return nextResolve(specifier, context);
     },
   });
-} else {
-  register("./guest-deny-imports.js", import.meta.url);
+} else if (isFunction(register)) {
+  try {
+    register("./guest-deny-imports.js", import.meta.url);
+  } catch {
+    // Hosts whose module.register cannot run loader hooks lose the deny list;
+    // the guest remains trusted code, not a sandbox boundary.
+  }
 }
 
 // Guest programs run here, off the host thread. The host can terminate() this