Struct LoadedPlugin 

pub struct LoadedPlugin { /* private fields */ }

A live plugin instance: its Store (holding the scoped WASI view), the lifecycle bindings, the per-call budget, its host-issued identity and effective grant. Dropping it tears the Store down (the reload/teardown seam PH7.12 formalises).

Implementations

impl LoadedPlugin

pub fn id(&self) -> PluginId

The host-issued identity for this instance. The guest never influences it; it is the numeric id inside this plugin’s provenance.

pub fn source_layer(&self) -> SourceLayer

The provenance layer the host stamps for every contribution this plugin registers (PH7.3+). Host-issued from PluginId, so a plugin cannot forge a builtin/user provenance — the acid test of §6.

pub fn grant(&self) -> &CapabilityGrant

The effective capability grant this plugin runs under.

pub fn denied_capabilities(&self) -> &[Capability]

Requested capabilities the trust tier withheld (e.g. proc:spawn for a user-installed plugin). The host turns these into a “loaded with reduced function” notification; the plugin still loaded.

pub fn data_dir(&self) -> Option<&Path>

The plugin’s private data dir, if it was instantiated with a grant (PluginHost::instantiate_plugin). None for the degenerate no-grant load.

pub async fn activate(&mut self) -> Result<(), PluginHostError>

Call the component’s activate export. For init.rs this runs the user’s configuration; for the no-op component it returns immediately. Fuel/epoch exhaustion or any wasm trap surfaces as PluginHostError::Trap and leaves the host live.

pub async fn deactivate(&mut self) -> Result<(), PluginHostError>

Call the component’s deactivate export (teardown / reload).