Module plugin 

Static capability model for future Wasm plugins. Wasm plugin boundary.

Structs

AuthorizedPluginComponent

Component bytes opened through filesystem policy.

AuthorizedPluginManifest

Plugin manifest data after matching an enabled host config.

AuthorizedWorkspaceReadAccess

Workspace read path after plugin capability authorization.

AuthorizedWorkspaceWriteAccess

Workspace write path after plugin capability authorization.

CapabilitySet

Composable plugin capability set used for authorization decisions.

DecodedCount

Guest count after range and host-width checks.

DecodedGuestString

Guest string after UTF-8 and byte-limit checks.

DecodedPayload

Guest payload after byte-limit checks.

DecodedTextRange

Guest text range after ordering and host-width checks.

DecodedWorkspacePath

Workspace path after UTF-8, size, and path-vocabulary checks.

DrainedPluginEffectReport

Drained ECS request messages.

DrainedPluginEffectRequests

Owner request batches produced by draining plugin effects.

EffectivePlugin

Host-approved plugin metadata after config/manifest validation.

EnabledPluginConfig

Borrowed validated view of a loadable enabled plugin config.

GuestDecodeLimits

Decode limits derived from validated runtime policy.

PendingPluginUpdateBatch

Effects accepted during one guest update.

PendingPluginWorkspaceIoBatch

Workspace I/O accepted during one guest update but not yet committed to filesystem policy.

PluginBufferEditProposal

Plugin buffer edit proposal with observed revision provenance.

PluginBufferHandle

Guest-visible buffer handle issued by the host.

PluginCapabilities

Static capability grants for one plugin.

PluginComponentPath

Validated local Wasm component path accepted by the runtime boundary.

PluginConfig

Static configuration for one Wasm plugin component.

PluginEffectBatchLimit

Effect cap for one plugin update.

PluginEffectDiscardReport

Effects discarded before successful return.

PluginHandleGeneration

Store generation used to reject handles issued before revocation.

PluginHandleLimit

Bounded live-handle count for one plugin instance.

PluginHandleShape

Redacted handle shape safe for diagnostics.

PluginHandleStore

Per-plugin handle table.

PluginHostContext

Host authorization context for one loaded plugin.

PluginHostImportBatches

Sealed work from one successful guest update.

PluginHostImportBatchesParts

Successful-return work split by sealed batch kind.

PluginHostImportDiscardReport

Discard report for one failed guest update.

PluginHostImportSession

Host-import state for one guest update.

PluginHostOwnerBatches

Successful-return work that must be published by non-runtime owners.

PluginHostOwnerBatchesParts

Paired owner work split by owning queue.

PluginHostOwnerDiscardReport

Redacted discard report for paired owner work.

PluginHostStateMismatch

Host context and handle store identity mismatch.

PluginIdentity

Validated stable plugin identity.

PluginInstanceState

Host-owned loaded instance state.

PluginManifest

Plugin-declared manifest data read before loading a component.

PluginOperationalEvent

Redacted runtime event.

PluginProposalPolicy

Static proposal handling policy for one plugin.

PluginRegistryConfig

Root registry for statically configured Wasm plugins.

PluginRevocationReport

Revocation outcome.

PluginRuntimeLimits

Serializable guest execution limits.

PluginRuntimeSpec

Policy-approved runtime input.

PluginRuntimeTraceEvent

One redacted event in a future plugin runtime replay trace.

PluginRuntimeTraceProposalReceipt

Redacted proposal receipt trace payload.

PluginSchedulerPolicy

Registry-level guest publication policy.

PluginViewHandle

Guest-visible view handle issued by the host.

PluginWorkspaceIoBudget

Bounded workspace I/O budget for one successful plugin update.

PluginWorkspaceIoCancellationReport

Revocation cancellation report.

PluginWorkspaceIoDiscardReport

Report from discarding workspace I/O before filesystem policy execution.

PluginWorkspaceIoReport

Report from executing sealed workspace I/O through filesystem policy.

PluginWorkspaceIoWorkerEnqueueError

Failed admission of a sealed workspace I/O batch.

PluginWorkspaceIoWorkerEnqueueErrorParts

Retryable workspace I/O worker enqueue failure split by queue boundary.

PluginWorkspaceIoWorkerQueue

FIFO queue for sealed workspace I/O.

PluginWorkspaceIoWorkerQueueLimit

Bounded worker queue cap.

PluginWorkspaceObserveBytes

Bounded workspace bytes safe to return to a guest.

PluginWorkspaceObserveTaskCancellationReport

Cancellation report for revoked workspace observation task state.

PluginWorkspaceObserveTaskCompletion

Completed workspace observation task retained for guest polling.

PluginWorkspaceObserveTaskCompletionShape

Redacted identity-scoped shape for a retained workspace observation task completion.

PluginWorkspaceObserveTaskDiscardReport

Report from discarding workspace observation tasks before filesystem policy execution.

PluginWorkspaceObserveTaskEnqueueError

Failed admission of a sealed workspace observation task batch.

PluginWorkspaceObserveTaskEnqueueErrorParts

Retryable observe-task enqueue failure split by queue boundary.

PluginWorkspaceObserveTaskEnqueueReport

Successful enqueue report for task requests committed after guest return.

PluginWorkspaceObserveTaskHandle

Owned identity-scoped workspace observation task handle.

PluginWorkspaceObserveTaskId

Host-owned identifier for a workspace observation task.

PluginWorkspaceObserveTaskQueue

Bounded host queue for guest-visible workspace observations.

PluginWorkspaceObserveTaskQueueLimit

Queue bounds for guest-visible workspace observation tasks.

PluginWorkspaceReadByteLimit

Non-zero workspace read byte cap.

PluginWorkspaceReadCompletion

Completed workspace read.

PluginWorkspaceReadSuccess

Successful workspace read result.

PluginWorkspaceWriteByteLimit

Non-zero workspace write byte cap.

PluginWorkspaceWriteCompletion

Completed workspace write.

PluginWorkspaceWriteSuccess

Successful workspace write result.

PolicyOpenedPluginManifest

Plugin manifest bytes opened through filesystem policy but not yet parsed or authorized.

ResolvedPluginBuffer

Resolved buffer handle target and provenance.

ResolvedPluginView

Resolved view handle target.

SealedPluginEffectBatch

Effects from a successful guest update.

SealedPluginWorkspaceIoBatch

Workspace I/O from a guest update that reached the successful-return boundary.

SealedPluginWorkspaceObserveTaskBatch

Workspace observation tasks from a successful guest update.

ValidatedPluginConfig

Plugin config after registry-level identity validation.

ValidatedPluginRegistry

Plugin registry after identity invariants have been checked.

ValidatedPluginRuntimeLimits

Runtime limits after host cap validation.

WorkspacePath

Owned workspace-relative path accepted by the plugin authorization boundary.

WorkspacePathGrant

Workspace-relative path grant.

WorkspacePathRef

Borrowed workspace-relative path accepted by the plugin authorization boundary.

Enums

CapabilityAtom

One granular authority atom understood by the plugin host.

DecodedBufferEdit

Guest buffer edit after scalar, range, text, and payload-limit checks.

DecodedCapabilityRef

Capability request decoded into Alma-owned vocabulary.

GuestDecodeError

Guest decode failure with redacted payload data.

GuestDecodeField

Guest-owned field names that can appear in decode diagnostics.

PluginAuthorizationError

Errors returned when a guest attempts a denied host import.

PluginBufferObservationError

Buffer observation rejection after authorization and handle decoding.

PluginCapabilityRef

Capability check requested at a host import boundary.

PluginCapabilityShape

Redacted shape for a plugin capability request.

PluginComponentOpenError

Errors returned while opening a plugin component through filesystem policy.

PluginComponentPathError

Errors returned while validating a configured component path.

PluginEffectBatchLimitField

Effect batch limit fields with stable diagnostic spellings.

PluginEffectCommitError

Plugin effect commit failure.

PluginEffectCommitErrorKind

Plugin effect commit rejection class.

PluginHandleError

Host-side rejection while resolving a plugin handle.

PluginHandleKind

Host-side handle kind.

PluginHostImportError

Host-import rejection.

PluginHostResourceKind

Component-model resource rejection shape.

PluginIdentityError

Errors returned while validating a stable plugin identity.

PluginInstanceAccessError

Access rejected by the lifecycle gate.

PluginInstanceLifecycle

Runtime scheduling gate.

PluginLoadError

Errors returned while loading plugin metadata.

PluginManifestOpenError

Errors returned while opening a plugin manifest through filesystem policy.

PluginOperationalEventKind

Payload-free event kind.

PluginOperationalExport

Closed guest export diagnostic vocabulary.

PluginOperationalImport

Closed host-import diagnostic vocabulary.

PluginOperationalImportRejection

Redacted host-import rejection shape.

PluginOperationalQueue

Bounded queue class.

PluginOperationalRuntimeFailure

Closed runtime failure diagnostic vocabulary.

PluginProposalReviewMode

Review mode for plugin proposals before owner mutation.

PluginRegistryError

Errors returned while validating a statically configured plugin registry.

PluginResourceHandleRejectionReason

Component-model resource rejection shape.

PluginRevocationReason

Revocation cause recorded by the host.

PluginRuntimeLimitError

Errors returned while validating configured runtime limits.

PluginRuntimeLimitField

Runtime limit fields with stable diagnostic spellings.

PluginRuntimeTraceEffect

Redacted drained effect shape.

PluginRuntimeTraceEventClass

Top-level trace event class.

PluginRuntimeTraceEventKind

Redacted plugin runtime trace payload.

PluginRuntimeTraceProposalOutcome

Redacted proposal receipt outcome.

PluginRuntimeTraceProposalOwner

Boundary that decided a proposal.

PluginRuntimeTraceProposalRejection

Closed proposal rejection shape.

PluginRuntimeTraceStatus

Redacted status request shape.

PluginRuntimeTraceTarget

Redacted owner target shape.

PluginRuntimeTraceWorkspaceIoCompletion

Redacted workspace I/O completion shape.

PluginRuntimeTraceWorkspaceObserveTaskOutcome

Redacted workspace observation task outcome.

PluginRuntimeTraceWorkspaceReadOutcome

Redacted workspace read outcome.

PluginRuntimeTraceWorkspaceWriteOutcome

Redacted workspace write outcome.

PluginUnloadPolicy

Loaded-instance disposal policy.

PluginWorkspaceIoBudgetField

Workspace I/O budget field names with stable diagnostic spellings.

PluginWorkspaceIoCommitError

Errors returned while accepting pending workspace I/O from one plugin update.

PluginWorkspaceIoCommitErrorKind

Workspace I/O commit rejection class.

PluginWorkspaceIoCompletion

One completed workspace I/O request.

PluginWorkspaceIoExecutionModel

V1 workspace I/O execution policy.

PluginWorkspaceIoIdentityMismatchSource

Workspace I/O identity pairing source.

PluginWorkspaceIoWorkerQueueError

Worker queue rejection.

PluginWorkspaceIoWorkerQueueErrorKind

Workspace I/O worker queue rejection class.

PluginWorkspaceIoWorkerQueueLimitField

Worker queue limit fields with stable diagnostic spellings.

PluginWorkspaceObserveOutcome

Guest-deliverable workspace.observe result.

PluginWorkspaceObserveOutcomeShape

Redacted workspace.observe guest-delivery shape.

PluginWorkspaceObserveProjectionError

Rejection while projecting owner-facing workspace I/O into workspace.observe.

PluginWorkspaceObserveTaskIdError

Invalid workspace observation task id.

PluginWorkspaceObserveTaskPoll

Payload-free poll result for a workspace observation task.

PluginWorkspaceObserveTaskQueueError

Workspace observation task queue rejection.

PluginWorkspaceObserveTaskQueueErrorKind

Workspace observation task queue rejection class.

PluginWorkspaceObserveTaskQueueLimitField

Observe-task queue limit fields with stable diagnostic spellings.

PluginWorkspaceObserveTaskReservationMismatch

Closed reason a sealed task reservation cannot enter a queue.

PluginWorkspaceObserveTaskReserveError

Error reserving a workspace observation task during a guest update.

PluginWorkspaceObserveTaskResultShape

Redacted shape for a workspace observation task poll or take result.

PluginWorkspaceObserveTaskState

Closed workspace observation task state.

PluginWorkspaceObserveTaskTake

Consuming result for a workspace observation task.

PluginWorkspaceReadError

Filesystem-policy read rejection at the plugin boundary.

PluginWorkspaceWriteError

Filesystem-policy write rejection at the plugin boundary.

WitCapability

WIT-facing capability kind.

WitCapabilityRefError

Errors returned when converting WIT capability data into an authorization query.

WitHostImport

WIT host import currently exposed to guest components.

WitWorkspaceObserveTaskImport

Task-based workspace.observe host import group.

WorkspaceAccessKind

Authorized workspace operation kind.

WorkspacePathError

Workspace path validation failure.

Constants

CAPABILITY_NAMES

Stable scalar capability names shared with WIT and config.

CURRENT_WIT_WORLD

WIT world supported by this crate’s current plugin ABI.

DEFAULT_PLUGIN_HANDLE_LIMIT

Default maximum live resource handles for one plugin instance.

MAX_PLUGIN_FUEL_PER_UPDATE

Maximum fuel units accepted for one guest update.

MAX_PLUGIN_IDENTITY_BYTES

Maximum bytes accepted for a stable plugin identity.

MAX_PLUGIN_INTENT_BATCHES

Maximum sealed effect batches accepted for ECS publication.

MAX_PLUGIN_MEMORY_BYTES

Maximum linear memory bytes accepted for one guest instance.

MAX_PLUGIN_MESSAGE_BYTES

Maximum host-call payload bytes accepted from one guest call.

MAX_PLUGIN_SCHEDULER_INTENT_BATCHES

Maximum queued sealed batches across enabled plugins.

MAX_PLUGIN_TIMEOUT_MS

Maximum wall-clock milliseconds accepted for one guest update.

WIT_HANDLE_RESOURCES

Opaque WIT resource names exported by the host interface.

WIT_HOST_IMPORTS

Host functions currently exposed to guests.

WIT_HOST_INTERFACE

Host interface imported by plugin components.

WIT_PACKAGE

WIT package name for Alma plugin components.

WIT_PLUGIN_EXPORTS

Lifecycle exports implemented by plugin components.

WIT_SOURCE

WIT source checked into the repository for deterministic drift tests.

WIT_VERSION

WIT package version for Alma plugin components.

WIT_WORKSPACE_OBSERVE_TASK_IMPORTS

Task-based workspace.observe host function group.

WIT_WORLD

WIT world name for Alma plugin components.

WIT_WORLD_ID

WIT world string assembled from package, world, and version constants.