Crate nichlink_plugin_host 

Isolated execution and atomic deployment for NichLink plugins. NichLink 插件的隔离执行与原子部署。

Structs

Deployment

One consistent view of registration metadata and executable code. 注册元数据与可执行代码的一致视图。

Ed25519Verifier

Verifies plugin signatures against a fixed set of trusted public keys. 用一组固定可信公钥验证插件签名。

HotDeployment

Lock-free reads with serialized, validated replacement. 读取无锁，替换串行校验。

PluginAdmission

Selection policy, trust root, catalogue, and verifier in one admission step. 把筛选策略、信任根、目录与验证器合成一次准入。

ProcessBackend

Process-isolated plugin loader. 进程隔离插件加载器。

ProcessInstance

A process plugin. Each call gets a fresh child and a hard deadline. 进程插件。每次调用使用独立子进程和硬超时。

ProcessLimits

Limits for one isolated process call. 单次隔离进程调用的限制。

ProcessProgram

Executable, fixed arguments, and child environment for an isolated plugin. 隔离插件使用的程序、固定参数与子进程环境。

TrustedPublicKey

One public key the host will trust, named by its SHA-256 fingerprint. 宿主愿意信任的一个公钥，以它的 SHA-256 指纹命名。

WasmBackend

Loads Wasm without WASI or host imports. 在没有 WASI 和宿主导入的环境中加载 Wasm。

WasmInstance

A loaded, fuel-metered Wasm plugin. 已加载并启用燃料计量的 Wasm 插件。

WasmLimits

Resource budget applied to every Wasm call. 每次 Wasm 调用使用的资源预算。

WasmPluginSlot

A release-time opening for one Wasm extension or replacement. 正式发布时保留的一个 Wasm 扩展或替换入口。

WasmPluginTable

Lazily activates verified Wasm plugins in explicitly retained slots. 仅在显式保留的槽中懒加载已验证 Wasm 插件。

Enums

HostError

Failure returned at the plugin-host seam. 插件宿主接口返回的失败。

ValidationChannel

Trust lane enabled for one runtime plugin slot. 运行时插件槽允许使用的信任通道。

Constants

OFFICIAL_LOCK

Lock file a publisher maintains for the official lane. 发布者为官方通道维护的锁文件。

PLUGIN_LOCK_DIRECTORY

Directory, under a package root, that holds the plugin locks. 包根之下存放插件锁的目录。

USER_LOCK

Lock file a host writes for user plugins. 宿主为用户插件写下的锁文件。

Traits

PluginInstance

One callable plugin implementation. 一个可调用的插件实现。

Functions

lane_for

The lane an admitted artifact may enter, from the assurance it earned. 已准入工件可进入的通道，取决于它换来的保证等级。

plugin_catalog

Read both plugin locks under package_root into one catalogue. 把 package_root 下的两份插件锁读成一份目录。