Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

plugin

package

Go to main page

Versions in this module

v0

v0.2.1

Jul 10, 2026

v0.2.0

Jul 5, 2026

Changes in this version

+ const RiskHost

+ const RiskRead

+ const RiskWrite

+ const RuntimeStateArmed

+ const RuntimeStateFailed

+ const RuntimeStateStopped

+ const TypeSystem

+ const TypeWasm

+ const TypeWorker

+ var ErrCapabilityDenied = errors.New("plugin capability denied")

+ var ErrCircuitOpen = errors.New("plugin circuit breaker open")

+ var ErrHostServiceUnavailable = errors.New("plugin host service unavailable")

+ var ErrRPCDenied = errors.New("rpc call denied")

+ var ErrRPCInvalid = errors.New("invalid rpc registration")

+ var ErrRPCNoMethod = errors.New("rpc method not found")

+ var ErrRPCNoService = errors.New("rpc service not found")

+ func CapabilityRisk(cap string) (string, bool)

+ func DigestSHA256(artifact []byte) string

+ func SigningPayload(m Manifest) []byte

+ func VerifyManifest(m Manifest, artifact []byte, policy TrustPolicy) error

+ type Broker struct

+ func NewBroker(loaded Loaded, services HostServices) (*Broker, error)

+ func (b *Broker) CanExposeRPC() bool

+ func (b *Broker) HTTPDo(ctx context.Context, req HostHTTPRequest) (HostHTTPResponse, error)

+ func (b *Broker) HasCapability(cap string) bool

+ func (b *Broker) KVGet(ctx context.Context, key string) ([]byte, bool, error)

+ func (b *Broker) KVPut(ctx context.Context, key string, value []byte) error

+ func (b *Broker) Log(ctx context.Context, level, message string, fields map[string]string) error

+ func (b *Broker) Notify(ctx context.Context, title, body string) error

+ func (b *Broker) PluginID() string

+ func (b *Broker) RPCCall(ctx context.Context, service, method string, request []byte) ([]byte, error)

+ type CapabilityError struct

+ Capability string

+ PluginID string

+ func (e *CapabilityError) Error() string

+ func (e *CapabilityError) Unwrap() error

+ type HTTPHost interface

+ Do func(ctx context.Context, req HostHTTPRequest) (HostHTTPResponse, error)

+ type HostAudit interface

+ RecordHostCall func(ctx context.Context, event HostCallEvent)

+ type HostCallEvent struct

+ Action string

+ Capability string

+ Decision string

+ PluginID string

+ Reason string

+ type HostHTTPRequest struct

+ Body []byte

+ Header map[string]string

+ Method string

+ URL string

+ type HostHTTPResponse struct

+ Body []byte

+ Header map[string]string

+ StatusCode int

+ type HostLogEntry struct

+ Fields map[string]string

+ Level string

+ Message string

+ PluginID string

+ type HostServices struct

+ Audit HostAudit

+ GuardURL func(url string) error

+ HTTP HTTPHost

+ KV KVHost

+ Log LogHost

+ Notify NotifyHost

+ RPC RPCHost

+ type InterfaceContract struct

+ Methods []string

+ Scopes []string

+ Service string

+ type InvokeRequest struct

+ Action string

+ Payload json.RawMessage

+ PluginID string

+ type InvokeResponse struct

+ Message string

+ OK bool

+ Result json.RawMessage

+ type Invoker interface

+ Invoke func(ctx context.Context, req InvokeRequest) (InvokeResponse, error)

+ type KVHost interface

+ Get func(ctx context.Context, key string) ([]byte, bool, error)

+ Put func(ctx context.Context, key string, value []byte) error

+ type LoadOutcome struct

+ BundlePath string

+ Loaded bool

+ PluginID string

+ Reason string

+ type Loaded struct

+ BundlePath string

+ Capabilities []string

+ Manifest Manifest

+ type Loader struct

+ Dir string

+ Policy TrustPolicy

+ func (l Loader) Load() ([]Loaded, []LoadOutcome, error)

+ type LogHost interface

+ Write func(ctx context.Context, entry HostLogEntry) error

type Manifest

+ DigestSHA256 string

+ Entrypoint string

+ Interfaces []InterfaceContract

+ Publisher string

+ SignatureEd25519 string

+ UI *ManifestUI

+ Version string

+ func VerifyInstallManifest(manifestBytes, artifact []byte, policy TrustPolicy) (Manifest, error)

+ type ManifestUI struct

+ Nav []NavContribution

+ Views []ViewContribution

+ type NavContribution struct

+ Icon string

+ Route string

+ Scopes []string

+ Section string

+ SectionTitle string

+ Title string

+ type NotifyHost interface

+ Send func(ctx context.Context, title, body string) error

+ type RPCHandler func(ctx context.Context, method string, request []byte) ([]byte, error)

+ type RPCHost interface

+ Call func(ctx context.Context, caller, service, method string, request []byte) ([]byte, error)

+ type RPCRegistry struct

+ func NewRPCRegistry() *RPCRegistry

+ func (r *RPCRegistry) Allow(callerPluginID, service string)

+ func (r *RPCRegistry) Call(ctx context.Context, caller, service, method string, request []byte) ([]byte, error)

+ func (r *RPCRegistry) CallOperator(ctx context.Context, service, method string, request []byte) ([]byte, error)

+ func (r *RPCRegistry) Register(ownerPluginID, service, version string, methods []string, handler RPCHandler) error

+ func (r *RPCRegistry) Revoke(callerPluginID, service string)

+ func (r *RPCRegistry) Services() []RPCServiceDescriptor

+ func (r *RPCRegistry) Unregister(service string)

+ type RPCServiceDescriptor struct

+ Methods []string

+ Owner string

+ Service string

+ Version string

+ type Runner interface

+ Name func() string

+ Start func(ctx context.Context, req RunnerStartRequest) (RunnerStartResult, error)

+ Stop func(ctx context.Context, req RunnerStopRequest) error

+ type RunnerStartRequest struct

+ Broker *Broker

+ Loaded Loaded

+ PluginID string

+ type RunnerStartResult struct

+ Message string

+ type RunnerStopRequest struct

+ PluginID string

+ Reason string

+ type RuntimeManager struct

+ func NewRuntimeManager(services HostServices) *RuntimeManager

+ func NewRuntimeManagerWithOptions(opts RuntimeManagerOptions) *RuntimeManager

+ func (m *RuntimeManager) Invoke(ctx context.Context, pluginID, action string, payload json.RawMessage) (InvokeResponse, error)

+ func (m *RuntimeManager) IsArmed(pluginID string) bool

+ func (m *RuntimeManager) Snapshot() map[string]RuntimeStatus

+ func (m *RuntimeManager) Start(ctx context.Context, loaded Loaded) (RuntimeStatus, error)

+ func (m *RuntimeManager) Status(pluginID string) (RuntimeStatus, bool)

+ func (m *RuntimeManager) Stop(pluginID, message string) (RuntimeStatus, error)

+ type RuntimeManagerOptions struct

+ Runners map[string]Runner

+ Services HostServices

+ StartTimeout time.Duration

+ type RuntimeStatus struct

+ Message string

+ PluginID string

+ Runner string

+ StartedAt time.Time

+ State string

+ StoppedAt time.Time

+ UpdatedAt time.Time

+ type SystemRunner struct

+ func NewSystemRunner(opts SystemRunnerOptions) *SystemRunner

+ func (r *SystemRunner) Invoke(ctx context.Context, req InvokeRequest) (InvokeResponse, error)

+ func (r *SystemRunner) Name() string

+ func (r *SystemRunner) Start(ctx context.Context, req RunnerStartRequest) (RunnerStartResult, error)

+ func (r *SystemRunner) Stop(ctx context.Context, req RunnerStopRequest) error

+ type SystemRunnerOptions struct

+ CrashThreshold int

+ EnvAllowlist []string

+ InvokeTimeout time.Duration

+ MaxHostCalls int

+ MaxOutputBytes int

+ RuntimeDir string

+ StopGrace time.Duration

+ type TrustPolicy struct

+ AllowUnsignedHostRisk bool

+ TrustedPublishers map[string]ed25519.PublicKey

+ func ParseTrustPolicyJSON(data []byte) (TrustPolicy, error)

+ type ViewAction struct

+ Form []ViewFormField

+ Interface string

+ Label string

+ Method string

+ Scopes []string

+ type ViewColumn struct

+ Key string

+ Label string

+ Render string

+ type ViewContribution struct

+ Actions []ViewAction

+ Columns []ViewColumn

+ ComponentKey string

+ Kind string

+ Route string

+ Source *ViewSource

+ Title string

+ type ViewFormField struct

+ Key string

+ Kind string

+ Label string

+ Options []string

+ type ViewSource struct

+ Interface string

+ Method string

v0.1.0

Jun 11, 2026

Changes in this version

+ func CapabilityList() []string

+ func ValidateManifest(m Manifest) error

+ type Manifest struct

+ Capabilities []string

+ ID string

+ Name string

+ Type string