Struct PluginRef 

pub struct PluginRef { /* private fields */ }

Manager-owned wrapper that pairs a plugin with its authoritative config.

The trusted_config comes from the config loader / manager — never from the plugin itself. The executor reads all scheduling decisions (mode, priority, hooks, capabilities, on_error) from this config.

The plugin receives a copy of its config at construction time so it can read its own settings during hook execution. But the manager/executor never reads config back from the plugin.

Trust flow:

config loader → manager → PluginRef.trusted_config → executor
                       ↘ plugin (receives a copy, cannot influence scheduling)

Implementations

impl PluginRef

pub fn new(plugin: Arc<dyn Plugin>, trusted_config: PluginConfig) -> Self

Create a new PluginRef with an independently-sourced config.

The trusted_config must come from the config loader or manager, NOT from plugin.config(). The plugin may hold its own copy for reading during execute(), but the manager never consults it.

pub fn trusted_config(&self) -> &PluginConfig

The authoritative config used by the executor for all decisions.

pub fn plugin(&self) -> &Arc<dyn Plugin>

The plugin implementation (for calling initialize/shutdown).

pub fn id(&self) -> Uuid

Unique identifier assigned at registration. Returned by value — Uuid is Copy (16 bytes).

pub fn name(&self) -> &str

Convenience: plugin name from the trusted config.

pub fn mode(&self) -> PluginMode

Effective mode — returns Disabled if the runtime circuit breaker has tripped, otherwise returns the configured mode.

Acquire on the load pairs with Release on the disable() store so weak-memory-ordering hardware (ARM64) propagates the disable promptly across threads.

pub fn disable(&self)

Runtime-disable this plugin (one-way circuit breaker).

Called by the executor when a plugin errors with on_error: Disable. All clones of this PluginRef (in HookEntry, etc.) share the same AtomicBool, so the disable is visible across the system.

Release ordering establishes a happens-before with Acquire loads in is_disabled() and mode() — required for correctness on weak-memory hardware (ARM64) where Relaxed allows the new value to remain unobserved by other threads for an unbounded window.

pub fn is_disabled(&self) -> bool

Whether this plugin has been runtime-disabled. Acquire pairs with the Release in disable() (see mode()).

pub fn priority(&self) -> i32

Convenience: plugin priority from the trusted config.

Trait Implementations

impl Clone for PluginRef

fn clone(&self) -> PluginRef

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.