harn_vm/vm/

modules.rs

use std::collections::BTreeMap;
use std::future::Future;
use std::path::{Path, PathBuf};
use std::pin::Pin;
use std::sync::Arc;

use harn_modules::DefKind;

use crate::bytecode_cache;
use crate::module_artifact::{
    compile_module_artifact_from_source, compile_trusted_host_dispatch_module_artifact_from_source,
    ModuleImportBinding, ModuleProvenance,
};
use crate::module_source::{self, ModuleSource};
use crate::prepared_module::PreparedModuleArtifact;
use crate::value::{ModuleFunctionRegistry, VmClosure, VmEnv, VmError, VmValue};

use super::stdlib_artifact::stdlib_module_artifact;
use super::{ScopeSpan, Vm};
// Reached by `modules_tests` through this module's bindings.
#[cfg(test)]
use super::stdlib_artifact::{
    reset_stdlib_module_artifact_cache, stdlib_artifact_get_or_prepare,
    stdlib_module_artifact_cache_ptr,
};

fn verified_package_source(bytes: Vec<u8>, path: &Path) -> Result<String, VmError> {
    String::from_utf8(bytes).map_err(|error| {
        VmError::Runtime(format!(
            "installed package source {} is not valid UTF-8: {error}",
            path.display()
        ))
    })
}

fn exported_function_closures(
    loaded: &LoadedModule,
    display_path: &Path,
) -> Result<BTreeMap<String, Arc<VmClosure>>, VmError> {
    let mut exports = BTreeMap::new();
    for name in loaded
        .public_exports
        .keys()
        .filter(|name| loaded.functions.contains_key(*name))
    {
        let Some(closure) = loaded.functions.get(name) else {
            return Err(VmError::Runtime(format!(
                "Import error: exported function '{name}' is missing from {}",
                display_path.display()
            )));
        };
        exports.insert(name.clone(), Arc::clone(closure));
    }
    Ok(exports)
}

pub(crate) struct LoadedModule {
    pub(crate) functions: BTreeMap<String, Arc<VmClosure>>,
    /// Shared public declaration contract copied from the artifact and
    /// extended by explicit re-exports.
    pub(crate) public_exports: BTreeMap<String, DefKind>,
    /// Evaluated values of exported declarations whose runtime binding is
    /// produced by module initialization, including structs and enums.
    pub(crate) public_values: BTreeMap<String, VmValue>,
    /// Decoded JSON-Schema dict for each `pub type` alias that lowers to a
    /// schema. Importers bind the alias name to this value so
    /// expression-position uses (`output: ImportedAlias`) work.
    pub(crate) public_type_schemas: BTreeMap<String, VmValue>,
    /// Guard under which this filesystem module and its transitive closure were
    /// instantiated. A guarded execution cannot reuse an unguarded module even
    /// when the entry bytes currently match: its closures may retain imports
    /// compiled from earlier, unverified bytes.
    package_execution_guard: Option<Arc<harn_modules::package_execution::PackageExecutionGuard>>,
    pub(crate) _module_functions: crate::value::ModuleFunctionRegistry,
    pub(crate) _module_state: crate::value::ModuleState,
}

/// Runtime module cache shared by child VMs within one execution tree.
///
/// The map stays copy-on-write so a child can add modules without mutating its
/// parent. Cache entries are never replaced after instantiation, so cache hits
/// and map copies share their export maps plus their existing shared
/// registries/state through a cheap outer [`Arc`] instead of cloning the whole
/// module.
pub(crate) type ModuleCache = Arc<BTreeMap<PathBuf, Arc<LoadedModule>>>;

/// An import whose target module was still mid-load (an import cycle) when the
/// importing module reached it. The target's function closures don't exist yet
/// at that point, so the binding can't happen inline. We record it here and
/// resolve it once both modules are fully loaded — see
/// [`Vm::flush_deferred_cyclic_imports`].
#[derive(Clone, Debug)]
pub(crate) struct DeferredCyclicImport {
    /// Canonical path of the module that issued the import.
    pub(crate) importer: PathBuf,
    /// Canonical path of the cyclically-imported target module.
    pub(crate) target: PathBuf,
    /// Selectively-imported names, or `None` for a wildcard/side-effect import.
    pub(crate) selected_names: Option<Vec<String>>,
    /// When set, bind a namespace dict under this alias instead of flattening.
    pub(crate) namespace_alias: Option<String>,
    /// Statically demanded namespace members, or `None` for the whole namespace.
    pub(crate) namespace_members: Option<Vec<String>>,
}

#[derive(Clone, Copy)]
enum ImportProjection<'a> {
    BindCaller(Option<&'a [String]>),
    /// Bind `import * as alias` as a single namespace dict.
    BindNamespace(&'a str, Option<&'a [String]>),
    MaterializeOnly,
}

impl ImportProjection<'_> {
    fn package_rejection_kind(self) -> &'static str {
        match self {
            Self::BindCaller(_) | Self::BindNamespace(..) => "import",
            Self::MaterializeOnly => "execution",
        }
    }
}

/// Resolve the names an import may introduce from one loaded module. The
/// artifact's typed export contract is authoritative for ordinary imports,
/// re-exports, and delayed cycle binding alike.
#[derive(Clone, Copy)]
enum ImportNameUse {
    Binding,
    Namespace,
}

fn module_import_names(
    module_name: &str,
    loaded: &LoadedModule,
    selected_names: Option<&[String]>,
    name_use: ImportNameUse,
) -> Result<Vec<String>, VmError> {
    if let Some(names) = selected_names {
        for name in names {
            if !loaded.public_exports.contains_key(name) {
                let message = match name_use {
                    ImportNameUse::Binding => {
                        let hint = if loaded.functions.contains_key(name) {
                            " — it is defined there but not `pub`; mark it `pub` to export it"
                        } else {
                            ""
                        };
                        format!("Import error: '{name}' is not exported by {module_name}{hint}")
                    }
                    ImportNameUse::Namespace => {
                        format!("module `{module_name}` has no exported member `{name}`")
                    }
                };
                return Err(VmError::Runtime(message));
            }
        }
        return Ok(names.to_vec());
    }

    Ok(loaded.public_exports.keys().cloned().collect())
}

/// Build the closed namespace dict for `import * as alias from path`.
///
/// Includes `"_namespace" → module path` so `call_dict_method` dispatches
/// callable fields, plus every public export that has a runtime value.
/// Type/interface-only exports are omitted (no runtime binding).
fn build_namespace_dict(
    module_path: &str,
    loaded: &LoadedModule,
    members: Option<&[String]>,
) -> Result<VmValue, VmError> {
    let mut map = BTreeMap::new();
    map.insert(
        "_namespace".to_string(),
        VmValue::String(arcstr::ArcStr::from(module_path)),
    );
    let names = module_import_names(module_path, loaded, members, ImportNameUse::Namespace)?;
    for name in names {
        let kind = loaded
            .public_exports
            .get(&name)
            .expect("module_import_names validates the public export contract");
        if !kind.has_runtime_value() {
            // Still project schema-capable type aliases when present.
            if let Some(schema) = loaded.public_type_schemas.get(&name) {
                map.insert(name, schema.clone());
            }
            continue;
        }
        if let Some(value) = loaded.public_values.get(&name) {
            map.insert(name, value.clone());
            continue;
        }
        if let Some(schema) = loaded.public_type_schemas.get(&name) {
            map.insert(name, schema.clone());
            continue;
        }
        if let Some(closure) = loaded.functions.get(&name) {
            map.insert(name, VmValue::Closure(Arc::clone(closure)));
        }
    }
    Ok(VmValue::dict(map))
}

pub fn resolve_module_import_path(base: &Path, path: &str) -> PathBuf {
    let synthetic_current_file = base.join("__harn_import_base__.harn");
    if let Some(resolved) = harn_modules::resolve_import_path(&synthetic_current_file, path) {
        return resolved;
    }

    let mut file_path = base.join(path);

    if !file_path.exists() && file_path.extension().is_none() {
        file_path.set_extension("harn");
    }

    file_path
}

impl Vm {
    /// Dedicate this fresh VM to a Rust embedder-owned host-dispatch graph.
    ///
    /// The transition is one-way and must happen before any module load. The
    /// trusted graph bypasses ordinary prepared/on-disk bytecode caches and
    /// only the embedder can select a callable from it.
    pub fn enable_trusted_host_dispatch(&mut self) -> Result<(), VmError> {
        self.ensure_execution_available()?;
        if self.module_provenance == ModuleProvenance::TrustedHostDispatch {
            return Ok(());
        }
        if !self.module_cache.is_empty() || !self.imported_paths.is_empty() {
            return Err(VmError::Runtime(
                "trusted host dispatch must be enabled before loading modules".to_string(),
            ));
        }
        self.module_provenance = ModuleProvenance::TrustedHostDispatch;
        self.graph_link_table = None;
        self.linked_program_repository = None;
        Ok(())
    }

    fn resolve_module_import_path(&self, base: &Path, path: &str) -> Result<PathBuf, VmError> {
        if let Some(guard) = &self.package_execution_guard {
            let synthetic_current_file = base.join("__harn_import_base__.harn");
            if let Some(resolved) =
                harn_modules::resolve_import_path_with_guard(&synthetic_current_file, path, guard)
                    .map_err(|error| {
                    VmError::Runtime(format!("installed package import rejected: {error}"))
                })?
            {
                return Ok(resolved);
            }
            let mut file_path = base.join(path);
            if !file_path.exists() && file_path.extension().is_none() {
                file_path.set_extension("harn");
            }
            return Ok(file_path);
        }
        Ok(resolve_module_import_path(base, path))
    }

    /// Resolve a callable against this VM. Lazy callables initialize once per
    /// VM execution tree, then retain that module scope for later child VMs in
    /// the same tree. Fresh VM roots remain isolated.
    pub async fn resolve_callable(
        &mut self,
        callable: &crate::value::VmCallable,
    ) -> Result<Arc<crate::value::VmClosure>, VmError> {
        self.ensure_execution_available()?;
        match callable {
            crate::value::VmCallable::Eager(closure) => Ok(Arc::clone(closure)),
            crate::value::VmCallable::Lazy(lazy) => {
                let (cache_key, module_path) = self.lazy_callable_module_path(lazy);
                let next_guard = lazy
                    .package_execution_guard_handle()
                    .or_else(|| self.package_execution_guard.clone());
                if let Some(guard) = &next_guard {
                    guard.verify_entry_source(&module_path).map_err(|error| {
                        VmError::Runtime(format!("installed package execution rejected: {error}"))
                    })?;
                }
                let resolution = {
                    let mut modules = self.lazy_callable_modules.lock();
                    let slots = modules.entry(cache_key).or_default();
                    if let Some(slot) = slots.iter().find(|slot| slot.execution_guard == next_guard)
                    {
                        Arc::clone(&slot.resolution)
                    } else {
                        let resolution = Arc::new(tokio::sync::OnceCell::new());
                        slots.push(crate::vm::state::LazyCallableCacheSlot {
                            execution_guard: next_guard.clone(),
                            resolution: Arc::clone(&resolution),
                        });
                        resolution
                    }
                };
                let previous_package_execution_guard =
                    std::mem::replace(&mut self.package_execution_guard, next_guard);
                let resolved = resolution
                    .get_or_try_init(|| async {
                        let exports = self.load_module_exports(&module_path).await?;
                        let exports = exports
                            .into_iter()
                            .map(|(name, closure)| (name, closure.retained_for_host_registry()))
                            .collect();
                        // Pin the complete module graph loaded above so that a
                        // handler's transitively imported callees keep their
                        // home-module registries/state alive for later child
                        // VMs that hit this cache without re-importing.
                        Ok::<_, VmError>(Arc::new(crate::vm::state::ResolvedLazyCallable {
                            exports,
                            retained_module_graph: Arc::clone(&self.module_cache),
                        }))
                    })
                    .await;
                self.package_execution_guard = previous_package_execution_guard;
                let resolved = resolved?;
                resolved
                    .exports
                    .get(&lazy.function_name)
                    .cloned()
                    .ok_or_else(|| {
                        VmError::Runtime(format!(
                            "function '{}' is not exported by module '{}'",
                            lazy.function_name,
                            lazy.module_path.display()
                        ))
                    })
            }
            crate::value::VmCallable::Pipeline(_) => Err(VmError::TypeError(
                "pipeline callable requires execute_callable".to_string(),
            )),
        }
    }

    pub async fn execute_callable(
        &mut self,
        callable: &crate::value::VmCallable,
        args: &[crate::value::VmValue],
    ) -> Result<crate::value::VmValue, VmError> {
        let crate::value::VmCallable::Pipeline(pipeline) = callable else {
            let closure = self.resolve_callable(callable).await?;
            return self.call_closure_pub(&closure, args).await;
        };

        let (_, module_path) = self.lazy_module_path(&pipeline.module_path);
        let next_guard = pipeline
            .package_execution_guard_handle()
            .or_else(|| self.package_execution_guard.clone());
        let previous_package_execution_guard =
            std::mem::replace(&mut self.package_execution_guard, next_guard);
        let result = async {
            let closure = self
                .load_public_module_callable(&module_path, &pipeline.pipeline_name)
                .await?;
            self.call_closure_pub(&closure, args).await
        }
        .await;
        self.package_execution_guard = previous_package_execution_guard;
        result
    }

    fn lazy_callable_module_path(&self, lazy: &crate::value::LazyVmCallable) -> (PathBuf, PathBuf) {
        self.lazy_module_path(&lazy.module_path)
    }

    fn lazy_module_path(&self, path: &std::path::Path) -> (PathBuf, PathBuf) {
        let mut module_path = if path.is_absolute() {
            path.to_path_buf()
        } else {
            self.source_dir
                .clone()
                .unwrap_or_else(|| PathBuf::from("."))
                .join(path)
        };
        if !module_path.exists() && module_path.extension().is_none() {
            module_path.set_extension("harn");
        }
        let cache_key = module_path
            .canonicalize()
            .unwrap_or_else(|_| module_path.clone());
        (cache_key, module_path)
    }

    async fn load_module_from_source(
        &mut self,
        synthetic: PathBuf,
        source: &str,
    ) -> Result<Arc<LoadedModule>, VmError> {
        if let Some(loaded) = self.module_cache.get(&synthetic).cloned() {
            return Ok(loaded);
        }
        Arc::make_mut(&mut self.source_cache).insert(synthetic.clone(), Arc::from(source));

        let mut compile_span = self.module_compile_span();
        let compiled = match self.module_provenance {
            ModuleProvenance::TrustedHostDispatch => {
                compile_trusted_host_dispatch_module_artifact_from_source(&synthetic, source)?
            }
            ModuleProvenance::User | ModuleProvenance::PrivilegedWire => {
                compile_module_artifact_from_source(&synthetic, source)?
            }
        };
        if let Some(span) = &mut compile_span {
            span.mark_compile_succeeded();
        }
        drop(compile_span);
        let artifact = {
            let _load_span = self.module_load_span();
            PreparedModuleArtifact::from_cached(compiled)
        };

        self.imported_paths.push(synthetic.clone());
        let loaded = Arc::new(self.instantiate_module(None, &artifact).await?);
        self.imported_paths.pop();
        {
            let _load_span = self.module_load_span();
            Arc::make_mut(&mut self.module_cache).insert(synthetic, Arc::clone(&loaded));
        }
        self.record_module_loaded();
        Ok(loaded)
    }

    /// Widen a stdlib module's export surface with the builtins it re-exports
    /// (see [`harn_stdlib::builtin_reexports`]), so a Rust-implemented member of
    /// the module imports exactly like a Harn-implemented one.
    ///
    /// The name binds to a [`VmValue::BuiltinRef`], which is what a bare mention
    /// of a builtin already evaluates to — so an imported `assert_eq` and a
    /// global `assert_eq` are the same function reached two ways, not two
    /// implementations that can drift.
    fn add_builtin_reexports(module: &str, loaded: &mut LoadedModule) {
        for name in harn_stdlib::builtin_reexports(module) {
            // A `pub fn` in the module's Harn source wins: it is the more
            // specific declaration, and silently shadowing it here would make
            // the source of an export unguessable from reading the module.
            if loaded.public_exports.contains_key(*name) {
                continue;
            }
            loaded
                .public_exports
                .insert((*name).to_string(), DefKind::Function);
            loaded.public_values.insert(
                (*name).to_string(),
                VmValue::BuiltinRef(arcstr::ArcStr::from(*name)),
            );
        }
    }

    async fn load_stdlib_module_from_source(
        &mut self,
        module: &str,
        synthetic: PathBuf,
        source: &'static str,
    ) -> Result<Arc<LoadedModule>, VmError> {
        if let Some(loaded) = self.module_cache.get(&synthetic).cloned() {
            return Ok(loaded);
        }
        Arc::make_mut(&mut self.source_cache).insert(synthetic.clone(), Arc::from(source));

        let artifact = stdlib_module_artifact(
            module,
            &synthetic,
            source,
            self.module_phase_recorder.as_ref(),
        )?;
        self.imported_paths.push(synthetic.clone());
        let mut loaded = self.instantiate_stdlib_module(artifact.as_ref()).await?;
        self.imported_paths.pop();
        Self::add_builtin_reexports(module, &mut loaded);
        let loaded = Arc::new(loaded);
        {
            let _load_span = self.module_load_span();
            Arc::make_mut(&mut self.module_cache).insert(synthetic, Arc::clone(&loaded));
        }
        self.record_module_loaded();
        Ok(loaded)
    }

    async fn instantiate_stdlib_module(
        &mut self,
        artifact: &PreparedModuleArtifact,
    ) -> Result<LoadedModule, VmError> {
        self.instantiate_module(None, artifact).await
    }

    /// Instantiate a previously-hydrated [`PreparedModuleArtifact`] into a
    /// [`LoadedModule`]. Re-runs nested imports, replays the init chunk
    /// into a fresh module env, mints a [`VmClosure`] for each compiled
    /// function (stamped with `module_source_dir` so imports from inside
    /// those functions resolve against the originating file), and
    /// applies the re-export pass. Used by both stdlib and user-import
    /// code paths.
    async fn instantiate_module(
        &mut self,
        module_source_dir: Option<PathBuf>,
        artifact: &PreparedModuleArtifact,
    ) -> Result<LoadedModule, VmError> {
        let caller_env = self.env.clone();
        let old_source_dir = self.source_dir.clone();
        self.env = VmEnv::new();
        self.source_dir = module_source_dir.clone();

        for import in &artifact.imports {
            let projection = match &import.binding {
                ModuleImportBinding::Wildcard => ImportProjection::BindCaller(None),
                ModuleImportBinding::Selected(names) => ImportProjection::BindCaller(Some(names)),
                ModuleImportBinding::Namespace { alias, demand } => {
                    let members = match demand {
                        harn_parser::NamespaceDemand::Whole => None,
                        harn_parser::NamespaceDemand::Members(members) => {
                            Some(members.iter().cloned().collect::<Vec<_>>())
                        }
                    };
                    self.execute_import_with_projection(
                        &import.path,
                        ImportProjection::BindNamespace(alias, members.as_deref()),
                        artifact.provenance,
                    )
                    .await?;
                    continue;
                }
            };
            self.execute_import_with_projection(&import.path, projection, artifact.provenance)
                .await?;
        }

        // Nested modules own their own load spans. Start this module's span
        // only after those imports finish so aggregate load time is additive.
        let _load_span = self.module_load_span();

        let module_state: crate::value::ModuleState = {
            let mut init_env = self.env.clone();
            if !artifact.type_schema_init_chunks.is_empty() || artifact.init_chunk.is_some() {
                let saved_env = std::mem::replace(&mut self.env, init_env);
                let saved_frames = std::mem::take(&mut self.frames);
                let saved_handlers = std::mem::take(&mut self.exception_handlers);
                let saved_iterators = std::mem::take(&mut self.iterators);
                let saved_deadlines = std::mem::take(&mut self.deadlines);
                // STEP_STACK / PERSONA_STACK are thread-locals shared with
                // the calling frame. Emptying `self.frames` above means
                // any `prune_below_frame(0)` triggered while the init
                // chunk's bytecode runs — including the inevitable
                // frame-pop prune at end-of-chunk — would wipe active
                // steps owned by the *caller* (e.g., a `@step`-decorated
                // function whose body lazily imports a module). Snapshot
                // the persona/step context here and restore it after init
                // so module loading is invisible to the step-tracking
                // surface.
                let active_context = crate::step_runtime::suspend_active_context();
                let init_result: Result<(), VmError> = async {
                    for chunk in &artifact.type_schema_init_chunks {
                        self.run_chunk(Arc::clone(chunk)).await?;
                    }
                    if let Some(chunk) = &artifact.init_chunk {
                        self.run_chunk(Arc::clone(chunk)).await?;
                    }
                    Ok(())
                }
                .await;
                drop(active_context);
                init_env = std::mem::replace(&mut self.env, saved_env);
                self.frames = saved_frames;
                self.exception_handlers = saved_handlers;
                self.iterators = saved_iterators;
                self.deadlines = saved_deadlines;
                init_result?;
            }
            Arc::new(crate::value::VmMutex::new(init_env))
        };

        let module_env = self.env.clone();
        let registry: ModuleFunctionRegistry =
            Arc::new(crate::value::VmMutex::new(BTreeMap::new()));
        let mut functions: BTreeMap<String, Arc<VmClosure>> = BTreeMap::new();
        let mut public_exports = artifact.public_exports.clone();
        // The init chunk already ran into `module_state`, so init-backed public
        // values are live there. Read only the names identified by the artifact
        // contract and publish their evaluated values for importers.
        let mut public_values: BTreeMap<String, VmValue> = BTreeMap::new();
        {
            let state = module_state.lock();
            for name in &artifact.public_value_names {
                if let Some(value) = state.get(name) {
                    public_values.insert(name.clone(), value);
                }
            }
        }
        if artifact.provenance == crate::module_artifact::ModuleProvenance::PrivilegedWire {
            for (name, value) in &public_values {
                if !matches!(value, VmValue::Harness(_)) {
                    return Err(VmError::Runtime(format!(
                        "Privileged wire module export `{name}` produced {}; only a nominal Harness capability handle may cross the wire boundary",
                        value.type_name()
                    )));
                }
            }
        }
        let public_type_names = artifact.public_type_names.clone();
        let mut public_type_schemas: BTreeMap<String, VmValue> = {
            let state = module_state.lock();
            public_type_names
                .iter()
                .filter_map(|name| state.get(name).map(|schema| (name.clone(), schema)))
                .collect()
        };

        for (name, compiled) in &artifact.functions {
            let closure = Arc::new(VmClosure {
                func: Arc::clone(compiled),
                env: module_env.clone(),
                source_dir: module_source_dir.clone(),
                module_functions: Some(Arc::downgrade(&registry)),
                module_state: Some(Arc::downgrade(&module_state)),
                retained_module_scope: None,
            });
            registry.lock().insert(name.clone(), Arc::clone(&closure));
            self.env
                .define(name, VmValue::Closure(Arc::clone(&closure)), false)?;
            module_state
                .lock()
                .define(name, VmValue::Closure(Arc::clone(&closure)), false)?;
            functions.insert(name.clone(), Arc::clone(&closure));
        }

        for import in artifact.imports.iter().filter(|import| import.is_pub) {
            let cache_key = self.cache_key_for_import(&import.path)?;
            let Some(loaded) = self.module_cache.get(&cache_key).cloned() else {
                // A plain `import`/`import {...}` across a cycle is bound late
                // by `flush_deferred_cyclic_imports`, but a `pub import`
                // re-export has to publish the names into *this* module's
                // public surface right now — and the target is still mid-load,
                // so its surface does not exist yet. Name the cycle explicitly
                // instead of the misleading "was not loaded".
                if self.imported_paths.contains(&cache_key) {
                    return Err(VmError::Runtime(format!(
                        "Re-export error: cannot `pub import` from '{}' because it forms an \
                         import cycle with this module (its public surface is still being \
                         built). Use a plain `import` here, or re-export from a module that is \
                         not part of the cycle.",
                        import.path
                    )));
                }
                return Err(VmError::Runtime(format!(
                    "Re-export error: imported module '{}' was not loaded",
                    import.path
                )));
            };
            // `pub import * as alias` publishes the alias namespace object —
            // never flatten target members into this module's public surface.
            if let ModuleImportBinding::Namespace { alias, .. } = &import.binding {
                if public_exports.contains_key(alias) || functions.contains_key(alias) {
                    return Err(VmError::Runtime(format!(
                        "Re-export collision: '{alias}' is defined here and also \
                         re-exported as a namespace from '{}'",
                        import.path
                    )));
                }
                // A public namespace is observable as a first-class value and
                // is therefore always complete.
                let dict = build_namespace_dict(&import.path, &loaded, None)?;
                public_values.insert(alias.clone(), dict);
                public_exports.insert(alias.clone(), DefKind::Variable);
                continue;
            }
            let selected_names = match &import.binding {
                ModuleImportBinding::Selected(names) => Some(names.as_slice()),
                ModuleImportBinding::Wildcard => None,
                ModuleImportBinding::Namespace { .. } => unreachable!("handled above"),
            };
            let names_to_reexport = module_import_names(
                &import.path,
                &loaded,
                selected_names,
                ImportNameUse::Binding,
            )?;
            for name in names_to_reexport {
                let Some(kind) = loaded.public_exports.get(&name).copied() else {
                    return Err(VmError::Runtime(format!(
                        "Re-export error: '{name}' is not exported by '{}'",
                        import.path
                    )));
                };
                let Some(closure) = loaded.functions.get(&name) else {
                    // Init-backed declarations carry their evaluated value
                    // directly, including struct constructors and enum
                    // namespaces.
                    if let Some(value) = loaded.public_values.get(&name) {
                        public_values.insert(name.clone(), value.clone());
                        public_exports.insert(name, kind);
                        continue;
                    }
                    // Type-only declarations carry no runtime binding. Preserve
                    // an optional schema lowering and the contract entry.
                    if let Some(schema) = loaded.public_type_schemas.get(&name) {
                        public_type_schemas.insert(name.clone(), schema.clone());
                    }
                    public_exports.insert(name, kind);
                    continue;
                };
                if let Some(existing) = functions.get(&name) {
                    if !Arc::ptr_eq(existing, closure) {
                        return Err(VmError::Runtime(format!(
                            "Re-export collision: '{name}' is defined here and also \
                             re-exported from '{}'",
                            import.path
                        )));
                    }
                }
                functions.insert(name.clone(), Arc::clone(closure));
                public_exports.insert(name, kind);
            }
        }

        self.env = caller_env;
        self.source_dir = old_source_dir;

        Ok(LoadedModule {
            functions,
            public_exports,
            public_values,
            public_type_schemas,
            package_execution_guard: module_source_dir
                .as_ref()
                .and(self.package_execution_guard.clone()),
            _module_functions: registry,
            _module_state: module_state,
        })
    }

    fn export_namespace_module(
        &mut self,
        module_path: &Path,
        loaded: &LoadedModule,
        alias: &str,
        members: Option<&[String]>,
    ) -> Result<(), VmError> {
        let module_name = module_path.display().to_string();
        if self.env.get(alias).is_some() {
            return Err(VmError::Runtime(format!(
                "Import collision: '{alias}' is already defined when importing {module_name}. \
                 Use a different namespace alias: import * as <name> from \"...\""
            )));
        }
        let dict = build_namespace_dict(&module_name, loaded, members)?;
        self.env.define(alias, dict, false)?;
        Ok(())
    }

    fn export_loaded_module(
        &mut self,
        module_path: &Path,
        loaded: &LoadedModule,
        selected_names: Option<&[String]>,
    ) -> Result<(), VmError> {
        let module_name = module_path.display().to_string();
        let export_names =
            module_import_names(&module_name, loaded, selected_names, ImportNameUse::Binding)?;

        for name in export_names {
            // `pub const` / `pub let` values: bind by value.
            if let Some(value) = loaded.public_values.get(&name) {
                if self.env.get(&name).is_some() {
                    return Err(VmError::Runtime(format!(
                        "Import collision: '{name}' is already defined when importing \
                         {module_name}. Use selective imports to disambiguate: \
                         import {{ {name} }} from \"...\""
                    )));
                }
                self.env.define(&name, value.clone(), false)?;
                continue;
            }
            // Type and interface declarations are valid imports without a
            // runtime value. Schema-capable aliases still bind their schema so
            // expression-position uses match local alias lowering.
            if let Some(schema) = loaded.public_type_schemas.get(&name) {
                self.env.define(&name, schema.clone(), false)?;
                continue;
            }
            if loaded
                .public_exports
                .get(&name)
                .is_some_and(|kind| !kind.has_runtime_value())
            {
                continue;
            }
            let Some(closure) = loaded.functions.get(&name) else {
                return Err(VmError::Runtime(format!(
                    "Import error: '{name}' is not defined in {module_name}"
                )));
            };
            if let Some(VmValue::Closure(_)) = self.env.get(&name) {
                return Err(VmError::Runtime(format!(
                    "Import collision: '{name}' is already defined when importing {module_name}. \
                     Use selective imports to disambiguate: import {{ {name} }} from \"...\""
                )));
            }
            self.env
                .define(&name, VmValue::Closure(Arc::clone(closure)), false)?;
        }
        Ok(())
    }

    /// Execute an import, reading and running the file's declarations.
    pub(super) fn execute_import<'a>(
        &'a mut self,
        path: &'a str,
        selected_names: Option<&'a [String]>,
    ) -> Pin<Box<dyn Future<Output = Result<(), VmError>> + Send + 'a>> {
        self.execute_import_with_projection(
            path,
            ImportProjection::BindCaller(selected_names),
            self.module_provenance,
        )
    }

    /// Bind `import * as alias from path` as a closed namespace dict.
    pub(super) fn execute_namespace_import_bind<'a>(
        &'a mut self,
        path: &'a str,
        alias: &'a str,
        members: Option<&'a [String]>,
    ) -> Pin<Box<dyn Future<Output = Result<(), VmError>> + Send + 'a>> {
        self.execute_import_with_projection(
            path,
            ImportProjection::BindNamespace(alias, members),
            self.module_provenance,
        )
    }

    fn materialize_import<'a>(
        &'a mut self,
        path: &'a str,
    ) -> Pin<Box<dyn Future<Output = Result<(), VmError>> + Send + 'a>> {
        self.execute_import_with_projection(
            path,
            ImportProjection::MaterializeOnly,
            self.module_provenance,
        )
    }

    fn apply_import_projection(
        &mut self,
        module_path: &Path,
        loaded: &LoadedModule,
        projection: ImportProjection<'_>,
    ) -> Result<(), VmError> {
        match projection {
            ImportProjection::BindCaller(selected_names) => {
                self.export_loaded_module(module_path, loaded, selected_names)
            }
            ImportProjection::BindNamespace(alias, members) => {
                self.export_namespace_module(module_path, loaded, alias, members)
            }
            ImportProjection::MaterializeOnly => Ok(()),
        }
    }

    fn execute_import_with_projection<'a>(
        &'a mut self,
        path: &'a str,
        projection: ImportProjection<'a>,
        provenance: ModuleProvenance,
    ) -> Pin<Box<dyn Future<Output = Result<(), VmError>> + Send + 'a>> {
        Box::pin(async move {
            let _import_span = ScopeSpan::new(crate::tracing::SpanKind::Import, path.to_string());

            let stdlib_module = path
                .strip_prefix("std/")
                .or_else(|| (path == "observability").then_some("observability"));
            if let Some(module) = stdlib_module {
                if let Some(source) = crate::stdlib_modules::get_stdlib_source(module) {
                    let synthetic = PathBuf::from(format!("<stdlib>/{module}.harn"));
                    if self.imported_paths.contains(&synthetic) {
                        return Ok(());
                    }
                    if let Some(loaded) = self.module_cache.get(&synthetic).cloned() {
                        return self.apply_import_projection(&synthetic, &loaded, projection);
                    }
                    if let Some(repository) = &self.linked_program_repository {
                        let artifact = repository.get(&synthetic).ok_or_else(|| {
                            VmError::Runtime(format!(
                                "linked program is missing required module std/{module}"
                            ))
                        })?;
                        self.imported_paths.push(synthetic.clone());
                        let loaded = Arc::new(
                            self.instantiate_module(
                                synthetic.parent().map(Path::to_path_buf),
                                &artifact,
                            )
                            .await?,
                        );
                        self.imported_paths.pop();
                        Arc::make_mut(&mut self.module_cache)
                            .insert(synthetic.clone(), Arc::clone(&loaded));
                        self.record_module_loaded();
                        return self.apply_import_projection(&synthetic, &loaded, projection);
                    }
                    let loaded = self
                        .load_stdlib_module_from_source(module, synthetic.clone(), source)
                        .await?;
                    if !matches!(projection, ImportProjection::MaterializeOnly) {
                        let _load_span = self.module_load_span();
                        self.apply_import_projection(&synthetic, &loaded, projection)?;
                    }
                    return Ok(());
                }
                return Err(VmError::Runtime(format!(
                    "Unknown stdlib module: std/{module}"
                )));
            }

            let base = self
                .source_dir
                .clone()
                .unwrap_or_else(|| PathBuf::from("."));
            let file_path = self.resolve_module_import_path(&base, path)?;
            let verified_source = if let Some(guard) = &self.package_execution_guard {
                let bytes = guard.verify_entry_source(&file_path).map_err(|error| {
                    VmError::Runtime(format!(
                        "installed package {} rejected: {error}",
                        projection.package_rejection_kind()
                    ))
                })?;
                Some(verified_package_source(bytes, &file_path)?)
            } else {
                None
            };

            let canonical = file_path
                .canonicalize()
                .unwrap_or_else(|_| file_path.clone());
            if self.imported_paths.contains(&canonical) {
                // Import cycle: `canonical` is still mid-load (it sits on the
                // import stack), so its function closures don't exist yet and
                // we cannot bind the requested names inline. Record the import
                // and resolve it once both modules finish loading — otherwise
                // whichever module happens to close the cycle silently loses
                // these bindings and fails with `Undefined builtin` at call
                // time, in a load-order-dependent way.
                match projection {
                    ImportProjection::BindCaller(selected_names) => {
                        if let Some(importer) = self.imported_paths.last().cloned() {
                            if importer != canonical {
                                self.deferred_cyclic_imports.push(DeferredCyclicImport {
                                    importer,
                                    target: canonical.clone(),
                                    selected_names: selected_names.map(<[String]>::to_vec),
                                    namespace_alias: None,
                                    namespace_members: None,
                                });
                            }
                        }
                    }
                    ImportProjection::BindNamespace(alias, members) => {
                        if let Some(importer) = self.imported_paths.last().cloned() {
                            if importer != canonical {
                                self.deferred_cyclic_imports.push(DeferredCyclicImport {
                                    importer,
                                    target: canonical.clone(),
                                    selected_names: None,
                                    namespace_alias: Some(alias.to_string()),
                                    namespace_members: members.map(<[String]>::to_vec),
                                });
                            }
                        }
                    }
                    ImportProjection::MaterializeOnly => {}
                }
                return Ok(());
            }
            if let Some(loaded) = self.module_cache.get(&canonical).cloned() {
                if let Some(source) = &verified_source {
                    let cached_source = self.source_cache.get(&canonical).map(Arc::as_ref);
                    if cached_source != Some(source.as_str()) {
                        return Err(VmError::Runtime(format!(
                            "installed package {} rejected: cached module {} was not compiled from the verified package bytes",
                            projection.package_rejection_kind(),
                            canonical.display()
                        )));
                    }
                    let active_guard = self
                        .package_execution_guard
                        .as_deref()
                        .expect("verified package source requires an active guard");
                    if loaded.package_execution_guard.as_deref() != Some(active_guard) {
                        return Err(VmError::Runtime(format!(
                            "installed package {} rejected: cached module {} was not instantiated under the active package execution guard",
                            projection.package_rejection_kind(),
                            canonical.display()
                        )));
                    }
                }
                return self.apply_import_projection(&canonical, &loaded, projection);
            }
            self.imported_paths.push(canonical.clone());

            // The link table, when this graph has one, names this module's
            // artifact from a digest the entry walk already recorded — so the
            // file is never read. Guard-verified package bytes are excluded:
            // they are their own authority and deliberately bypass every memo,
            // and `verified_source` is `Some` exactly when a guard is active.
            let closed = self
                .linked_program_repository
                .as_ref()
                .map(|repository| {
                    repository
                        .get(&canonical)
                        .or_else(|| repository.get(&file_path))
                        .ok_or_else(|| {
                            VmError::Runtime(format!(
                                "linked program is missing required module {}",
                                file_path.display()
                            ))
                        })
                })
                .transpose()?;

            let linked = (closed.is_none()
                && provenance == ModuleProvenance::User
                && verified_source.is_none())
            .then(|| {
                let (content_hash, compilation_context) = self
                    .graph_link_table
                    .as_ref()?
                    .module_identity(canonical.as_path())?;
                let _load_span = self.module_load_span();
                self.linked_module_artifact(
                    &file_path,
                    &canonical,
                    content_hash,
                    &compilation_context,
                )
            })
            .flatten();

            let artifact = if let Some(closed) = closed {
                closed
            } else if let Some(linked) = linked {
                linked
            } else {
                let source = {
                    let _load_span = self.module_load_span();
                    match verified_source {
                        // Guard-verified package bytes are their own authority
                        // and never come from the shared on-disk memo.
                        Some(source) => Arc::new(ModuleSource::from_text(source)),
                        None => module_source::read(&file_path).map_err(|e| {
                            // Name the resolution base: relative imports resolve against
                            // the importing file's dir (or CWD when unset), so an error
                            // that prints only the joined path leaves the author guessing
                            // which base was used.
                            VmError::Runtime(format!(
                                "Import error: cannot read '{}' (resolved '{path}' relative to {}): {e}",
                                file_path.display(),
                                base.display()
                            ))
                        })?,
                    }
                };
                {
                    let source_cache = Arc::make_mut(&mut self.source_cache);
                    source_cache.insert(canonical.clone(), Arc::clone(source.text()));
                    source_cache.insert(file_path.clone(), Arc::clone(source.text()));
                }

                match provenance {
                    ModuleProvenance::TrustedHostDispatch => self.prepared_module_cache.prepare(
                        &file_path,
                        &canonical,
                        &source,
                        None,
                        self.module_phase_recorder.as_ref(),
                        ModuleProvenance::TrustedHostDispatch,
                    )?,
                    ModuleProvenance::User | ModuleProvenance::PrivilegedWire => {
                        self.prepared_module_cache.prepare(
                            &file_path,
                            &canonical,
                            &source,
                            None,
                            self.module_phase_recorder.as_ref(),
                            ModuleProvenance::User,
                        )?
                    }
                }
            };

            let module_source_dir = file_path.parent().map(|p| p.to_path_buf());
            let loaded = Arc::new(
                self.instantiate_module(module_source_dir, artifact.as_ref())
                    .await?,
            );
            self.imported_paths.pop();
            {
                let _load_span = self.module_load_span();
                Arc::make_mut(&mut self.module_cache)
                    .insert(canonical.clone(), Arc::clone(&loaded));
            }
            self.record_module_loaded();
            if !matches!(projection, ImportProjection::MaterializeOnly) {
                let _load_span = self.module_load_span();
                self.apply_import_projection(&canonical, &loaded, projection)?;
            }

            // Once the import stack fully unwinds, every module reachable from
            // this top-level import is cached, so any deferred cyclic imports
            // can now bind against fully-loaded modules.
            if self.imported_paths.is_empty() {
                let _load_span = self.module_load_span();
                self.flush_deferred_cyclic_imports()?;
            }

            Ok(())
        })
    }

    /// Resolve a module the link table names, without reading its source.
    ///
    /// `content_hash` comes from a manifest that was re-checked before the table
    /// was built, so it describes the bytes currently on disk. That is the whole
    /// licence for skipping the read: the digest is not being trusted about the
    /// file's identity, only reused instead of recomputed from bytes already
    /// proven unchanged.
    ///
    /// `None` means the table could not be honoured — most often the artifact was
    /// evicted from a shared cache directory between spawns. The caller then reads
    /// and compiles as usual, which is correct, just slower.
    fn linked_module_artifact(
        &self,
        file_path: &Path,
        canonical: &Path,
        content_hash: [u8; 32],
        compilation_context: &crate::module_artifact::ModuleCompilationContext,
    ) -> Option<Arc<PreparedModuleArtifact>> {
        if !bytecode_cache::cache_enabled() {
            return None;
        }
        if let Some(prepared) = self.prepared_module_cache.get_with_context(
            canonical,
            content_hash,
            ModuleProvenance::User,
            compilation_context,
        ) {
            return Some(prepared);
        }
        // `User` matches the in-memory probe just above: the link table is
        // an ordinary-VM fast path, and `enable_trusted_host_dispatch` clears
        // it outright, so a trusted graph never reaches here.
        let key = bytecode_cache::CacheKey::from_module_content_hash(
            content_hash,
            compilation_context,
            ModuleProvenance::User,
        );
        let artifact = bytecode_cache::load_module_for_key(file_path, key).artifact?;
        Some(self.prepared_module_cache.insert_with_context(
            canonical.to_path_buf(),
            content_hash,
            compilation_context,
            Arc::new(PreparedModuleArtifact::from_cached(artifact)),
        ))
    }

    /// Bind imports that were deferred because their target module was still
    /// mid-load (an import cycle). By the time the import stack has unwound,
    /// both the importing and target modules are fully instantiated and cached,
    /// so we can resolve the requested names against the target and define them
    /// into the importer's shared, mutable `module_state`. That env is the one
    /// every closure from the importing module consults (after its local env)
    /// at call time, so the late binding becomes visible without needing to
    /// rewrite the closures' captured lexical snapshots.
    fn flush_deferred_cyclic_imports(&mut self) -> Result<(), VmError> {
        if self.deferred_cyclic_imports.is_empty() {
            return Ok(());
        }
        let deferred = std::mem::take(&mut self.deferred_cyclic_imports);
        let mut still_pending = Vec::new();
        for import in deferred {
            let (Some(importer), Some(target)) = (
                self.module_cache.get(&import.importer).cloned(),
                self.module_cache.get(&import.target).cloned(),
            ) else {
                // One endpoint is not cached yet (a lazy import inside a
                // function body can defer before the other side loads). Keep
                // it for a later flush.
                still_pending.push(import);
                continue;
            };

            let mut module_state = importer._module_state.lock();
            if let Some(alias) = &import.namespace_alias {
                if module_state.get(alias).is_none() {
                    let dict = build_namespace_dict(
                        &import.target.display().to_string(),
                        &target,
                        import.namespace_members.as_deref(),
                    )?;
                    module_state.define(alias, dict, false)?;
                }
                continue;
            }

            let export_names = module_import_names(
                &import.target.display().to_string(),
                &target,
                import.selected_names.as_deref(),
                ImportNameUse::Binding,
            )?;

            for name in export_names {
                // A real local declaration (or an already-bound non-cyclic
                // import) wins over the cyclic re-binding.
                if module_state.get(&name).is_some() {
                    continue;
                }
                if let Some(closure) = target.functions.get(&name) {
                    module_state.define(&name, VmValue::Closure(Arc::clone(closure)), false)?;
                } else if let Some(value) = target.public_values.get(&name) {
                    // Init-backed public declarations imported across a cycle.
                    module_state.define(&name, value.clone(), false)?;
                } else if target
                    .public_exports
                    .get(&name)
                    .is_some_and(|kind| !kind.has_runtime_value())
                {
                    // Type-only public declarations carry no runtime binding.
                    continue;
                } else {
                    return Err(VmError::Runtime(format!(
                        "Import error: '{name}' is not defined in {}",
                        import.target.display()
                    )));
                }
            }
        }
        self.deferred_cyclic_imports = still_pending;
        Ok(())
    }

    /// Return the path key that `execute_import` would use to cache the
    /// LoadedModule for this import string. Used by the re-export pass to
    /// look up the already-loaded source module after `execute_import`
    /// has populated [`Vm::module_cache`].
    fn cache_key_for_import(&self, path: &str) -> Result<PathBuf, VmError> {
        if let Some(module) = path
            .strip_prefix("std/")
            .or_else(|| (path == "observability").then_some("observability"))
        {
            return Ok(PathBuf::from(format!("<stdlib>/{module}.harn")));
        }
        let base = self
            .source_dir
            .clone()
            .unwrap_or_else(|| PathBuf::from("."));
        let file_path = self.resolve_module_import_path(&base, path)?;
        Ok(file_path.canonicalize().unwrap_or(file_path))
    }

    async fn loaded_module_for_path(
        &mut self,
        path: &Path,
    ) -> Result<(PathBuf, Arc<LoadedModule>), VmError> {
        self.ensure_execution_available()?;
        let path_str = path.to_string_lossy().into_owned();
        self.materialize_import(&path_str).await?;

        let mut file_path = if path.is_absolute() {
            path.to_path_buf()
        } else {
            self.source_dir
                .clone()
                .unwrap_or_else(|| PathBuf::from("."))
                .join(path)
        };
        if !file_path.exists() && file_path.extension().is_none() {
            file_path.set_extension("harn");
        }

        let canonical = file_path
            .canonicalize()
            .unwrap_or_else(|_| file_path.clone());
        let loaded = self.module_cache.get(&canonical).cloned().ok_or_else(|| {
            VmError::Runtime(format!(
                "Import error: failed to cache loaded module '{}'",
                canonical.display()
            ))
        })?;
        Ok((canonical, loaded))
    }

    /// Load one explicitly public callable from a module.
    pub async fn load_public_module_callable(
        &mut self,
        path: &Path,
        name: &str,
    ) -> Result<Arc<VmClosure>, VmError> {
        let (canonical, loaded) = self.loaded_module_for_path(path).await?;
        if !loaded.public_exports.contains_key(name) {
            let hint = if loaded.functions.contains_key(name) {
                "; it is defined there but not `pub`"
            } else {
                ""
            };
            return Err(VmError::Runtime(format!(
                "callable '{name}' is not exported by module '{}'{hint}",
                canonical.display()
            )));
        }
        loaded.functions.get(name).cloned().ok_or_else(|| {
            VmError::Runtime(format!(
                "Import error: exported callable '{name}' is missing from {}",
                canonical.display()
            ))
        })
    }

    /// Load a module file and return the exported function closures that
    /// would be visible to a wildcard import.
    pub async fn load_module_exports(
        &mut self,
        path: &Path,
    ) -> Result<BTreeMap<String, Arc<VmClosure>>, VmError> {
        let (canonical, loaded) = self.loaded_module_for_path(path).await?;
        exported_function_closures(&loaded, &canonical)
    }

    /// Load synthetic source keyed by a synthetic module path and return
    /// the exported function closures that a wildcard import would expose.
    pub async fn load_module_exports_from_source(
        &mut self,
        source_key: impl Into<PathBuf>,
        source: &str,
    ) -> Result<BTreeMap<String, Arc<VmClosure>>, VmError> {
        self.ensure_execution_available()?;
        let synthetic = source_key.into();
        let loaded = self
            .load_module_from_source(synthetic.clone(), source)
            .await?;
        exported_function_closures(&loaded, &synthetic)
    }

    /// Load one callable from synthetic source for a host dispatch surface
    /// that has already selected the callable through its own policy. This is
    /// deliberately separate from module exports: script imports must
    /// continue to see only declarations in the typed public export contract.
    pub async fn load_module_callable_from_source(
        &mut self,
        source_key: impl Into<PathBuf>,
        source: &str,
        name: &str,
    ) -> Result<Option<Arc<VmClosure>>, VmError> {
        self.ensure_execution_available()?;
        let synthetic = source_key.into();
        let loaded = self.load_module_from_source(synthetic, source).await?;
        Ok(loaded.functions.get(name).cloned())
    }

    /// Load a module by import path (`std/foo`, relative module path, or
    /// package import) and return the exported function closures that a
    /// wildcard import would expose.
    pub async fn load_module_exports_from_import(
        &mut self,
        import_path: &str,
    ) -> Result<BTreeMap<String, Arc<VmClosure>>, VmError> {
        self.ensure_execution_available()?;
        self.materialize_import(import_path).await?;

        if let Some(module) = import_path
            .strip_prefix("std/")
            .or_else(|| (import_path == "observability").then_some("observability"))
        {
            let synthetic = PathBuf::from(format!("<stdlib>/{module}.harn"));
            let loaded = self.module_cache.get(&synthetic).cloned().ok_or_else(|| {
                VmError::Runtime(format!(
                    "Import error: failed to cache loaded module '{}'",
                    synthetic.display()
                ))
            })?;
            return exported_function_closures(&loaded, &synthetic);
        }

        let base = self
            .source_dir
            .clone()
            .unwrap_or_else(|| PathBuf::from("."));
        let file_path = self.resolve_module_import_path(&base, import_path)?;
        self.load_module_exports(&file_path).await
    }
}

#[cfg(test)]
#[path = "modules_tests.rs"]
mod tests;