Struct Grant 

pub struct Grant {
    pub plugin_id: String,
    pub session_id: String,
    pub run_id: String,
    pub max_cost_usd: Option<f64>,
    /* private fields */
}

An ephemeral allowlist and deadline, never persisted. Public identity fields are host bookkeeping, not values the plugin may update via subsequent replies.

Fields

plugin_id: String

session_id: String

run_id: String

max_cost_usd: Option<f64>

(E-P0, §5 decision 3) Plugin-proposed per-run USD cap. The effective cap is min(this, config) — enforced by P7.

Implementations

impl Grant

pub fn from_start( plugin_id: &str, session_id: &str, reply: Reply, ) -> Result<(Grant, Proposal), String>

The caller MUST establish explicit user intent and permission first.

pub fn apply_context_mode( &self, runtime: &Runtime, ) -> Result<Option<String>, String>

Apply only after the frontend accepted an explicit start and all grant checks passed. Uses exactly the ordinary /context command’s validation, not a raw config mutation or permission/recall bypass.

pub fn feedback_enabled(&self) -> bool

pub fn time_checkpoints_enabled(&self) -> bool

pub fn expired(&self) -> bool

pub fn deadline(&self) -> Option<Instant>

pub fn models(&self) -> &[Selection]

pub fn effective_cost_cap(&self, host_cap: Option<f64>) -> Option<f64>

(E-P7, §S3 decision 3) The effective per-run cost ceiling: the lower of the plugin-proposed max_cost_usd and a host-imposed cap. The plugin may only lower, never raise, the host limit. None on either side means “no limit from that side”; the result is None only when both are absent.

pub fn accept(&self, reply: Reply) -> Result<Option<Proposal>, String>

Trait Implementations

impl Debug for Grant

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.