feat: stage exact Plugin Tools through shared Worker composition

Extract the unchanged canonical plan model for typed Runtime snapshots without a Server dependency cycle. Bind Tool consumer identities to persisted Session/call IDs, use the owner-issued context and current publication authorization, and register through FeatureInstallPlan with cooperative shutdown. Validation so far: root cargo check --locked, portable model 6 tests/doctest, Worker actual Component adapter 7 focused tests, Server plan 9 tests via shared isolation. Full product launch owner/pin lifecycle and Remote/Embedded vertical integration remain a subsequent coherent change.
2026-10-30 04:42:53 +09:00
parent 3a13301f75
commit 165153c63c
42 changed files with 2123 additions and 424 deletions
@@ -91,6 +91,11 @@ impl CompiledTool {
    pub fn identity(&self) -> &ArtifactIdentity {
        &self.identity
    }
+
+    /// Declarations from the verified immutable package, not execution grants.
+    pub fn tools(&self) -> &[PluginToolManifest] {
+        &self.manifest.tools
+    }
 }

 #[derive(Debug)]