Module discovery 

Secure filesystem discovery for packaged WASM plugins.

A plugin directory has exactly this shape:

<configured-root>/<package>/manifest.json
                             <module named by wasm_module>

Only immediate child directories of explicitly configured roots are inspected. Symlinks are rejected and the module must be a plain filename in the same package directory. This deliberately avoids recursive search, implicit current-directory loading, and path traversal.

Structs

DiscoveredPlugin

A validated package whose files are safe to read.

DiscoveryLimits

Conservative input limits applied before allocating file contents.

Functions

discover_plugins

Discover packages in deterministic root/path order.