Module instance 

Host-owned identity and authority for one admitted plugin instance.

Package manifests describe what a component requests. The host creates one PluginInstanceScope only after selecting a concrete capability binding and deciding which requested permissions are granted. Every adapter and Wasmtime store shares that immutable scope, so future host services can use the state-owned identity instead of accepting a guest-supplied namespace.

Structs

PluginGrantSet

Immutable effective permissions for one admitted instance.

PluginInstanceId

The canonical logical namespace of one plugin capability binding.

PluginInstanceScope

Shared identity and authority injected into every store for one instance.