Struct PluginContext 

pub struct PluginContext {
    pub local_state: HashMap<String, Value>,
    pub global_state: HashMap<String, Value>,
}

Per-plugin, per-invocation execution context.

Each plugin receives its own PluginContext with:

• local_state — private to this plugin, this invocation. Fresh each time. Used for per-plugin counters, caches, scratch data.
• global_state — shared across all plugins in a pipeline. The executor merges changes back after serial phases so subsequent plugins see contributions from earlier ones.

All data needed for policy evaluation (identity, tenant, request metadata) comes from the payload’s extensions, capability-gated per plugin. Context is purely for transient execution state.

PluginContext
├── local_state: HashMap    # Per-plugin, per-request. Private.
└── global_state: HashMap   # Shared across plugins. Use with care.

Fields

local_state: HashMap<String, Value>

Plugin-local state. Private to this plugin, this invocation.

global_state: HashMap<String, Value>

Shared state across all plugins in the pipeline. The executor merges changes back after each serial-phase plugin.

Implementations

impl PluginContext

pub fn new() -> Self

Create a new empty plugin context.

pub fn with_global_state(global_state: HashMap<String, Value>) -> Self

Create a plugin context with pre-populated global state.

pub fn get_local(&self, key: &str) -> Option<&Value>

Get a value from local state.

pub fn set_local(&mut self, key: impl Into<String>, value: Value)

Set a value in local state.

pub fn get_global(&self, key: &str) -> Option<&Value>

Get a value from global state.

Examples found in repository

examples/plugin_demo.rs (line 137)

    async fn handle(
        &self,
        payload: &ToolInvokePayload,
        _extensions: &Extensions,
        ctx: &mut PluginContext,
    ) -> PluginResult<ToolInvokePayload> {
        // Check if the user has PII clearance (simulated via context)
        let has_clearance = ctx
            .get_global("pii_clearance")
            .and_then(|v| v.as_bool())
            .unwrap_or(false);

        if !has_clearance {
            println!(
                "  [pii-guard] DENIED: user '{}' lacks PII clearance for '{}'",
                payload.user, payload.tool_name
            );
            return PluginResult::deny(PluginViolation::new(
                "pii_access_denied",
                "PII clearance required",
            ));
        }

        println!(
            "  [pii-guard] OK: user '{}' has PII clearance",
            payload.user
        );
        PluginResult::allow()
    }

pub fn set_global(&mut self, key: impl Into<String>, value: Value)

Set a value in global state.

Trait Implementations

impl Clone for PluginContext

fn clone(&self) -> PluginContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PluginContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PluginContext

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for PluginContext

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for PluginContext

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.