Hare
165153c63c
Extract the unchanged canonical plan model for typed Runtime snapshots without a Server dependency cycle. Bind Tool consumer identities to persisted Session/call IDs, use the owner-issued context and current publication authorization, and register through FeatureInstallPlan with cooperative shutdown. Validation so far: root cargo check --locked, portable model 6 tests/doctest, Worker actual Component adapter 7 focused tests, Server plan 9 tests via shared isolation. Full product launch owner/pin lifecycle and Remote/Embedded vertical integration remain a subsequent coherent change.
617 B
617 B
Portable Plugin execution plan
This crate owns the immutable [WorkerPluginExecutionPlan] model, validation and canonical fingerprint shared by Server persistence and Runtime launch snapshots. [ArtifactDescriptor] projects only the artifact metadata needed to construct or compare exact pins without depending on Server API types.
It does not own catalog admission, persistence, configuration resolution, artifact delivery or authorization. A deserialized plan or owner-supplied artifact projection is not evidence of trust or live execution authority; callers must enforce those boundaries with their owners.