Crate lenso_plugin_bundle 

Immutable Plugin Release manifests, source materialization, and Bundle verification.

Structs

BundleVerificationLimits

Host-owned resource bounds for verifying an untrusted materialized Bundle.

ImplementationPolicy

Host policy used to resolve one implementation before Plan construction.

PluginArtifactV2

Exact final Component facts computed by the Bundle builder.

PluginEntryV2

The single executable Plugin entry derived from source.

PluginImplementationV3

One exact executable implementation of a V3 Plugin contract.

PluginManifestV2

Generated one-entry Plugin Manifest produced from source evidence.

PluginManifestV3

One Plugin Release contract with every publisher-provided implementation.

ResolvedPluginImplementation

One final implementation selected from a Plugin Release.

SourcePluginBuild

Source-only input for one generated V2 Plugin Bundle.

SourcePluginImplementation

One already-built implementation Artifact admitted to a V3 Plugin Release.

SourcePluginReleaseBuild

Source-only input for one V3 Plugin Release containing multiple implementations.

SourceProcessPluginBuild

Source-only input for one precompiled Process Plugin Bundle.

VerifiedBundle

Verified closure of one immutable Plugin Release.

Enums

BundleError

A Plugin authoring or immutable Bundle invariant failed closed.

PluginManifest

A strictly parsed Plugin Manifest, including the legacy single-artifact form.

Constants

MANIFEST_FILE

The only manifest filename accepted in a materialized Plugin Bundle.

MAX_PLUGIN_DESCRIPTOR_BYTES

Maximum accepted source-derived descriptor size.

PLUGIN_DESCRIPTOR_SECTION

Custom section carrying source-derived Plugin descriptor bytes.

Functions

build_source_plugin_bundle

Builds a one-entry V2 Plugin Bundle entirely from package and source evidence.

build_source_plugin_release_bundle

Materializes a V3 Plugin Bundle from one contract and built implementation Artifacts.

build_source_process_plugin_bundle

Builds a one-entry V2 Process Plugin Bundle from generated source evidence.

extract_plugin_descriptor

Extracts one canonical source-derived Plugin descriptor without executing it.

read_bundle_manifest

Strictly reads either supported Plugin Manifest version from a verified Bundle.

resolve_implementation

Selects one implementation deterministically. Selection never implies runtime fallback.

sha256_digest

Validates publisher-owned Manifest semantics independently of Host policy. Computes the canonical digest syntax used by Plugin Release documents and files.

verify_bundle_directory

Verifies an already materialized directory as an exact immutable Bundle closure.

verify_bundle_directory_with_limits

Verifies one Bundle with explicit Host-owned resource bounds.