Validate structural correctness of a parsed manifest: name/version/scope. Called by `parse_manifest` after TOML deserialization succeeds.

Resolve an XDG directory with a `$HOME`-based fallback. Never falls back to a literal `~` path - the OS does not expand those.

Acquire a ready machine for a task.

Get the allocated machines tracking set.

Cast an opaque `MalboxResultBuilder*` to a Rust `&mut ResultBuilder`. # Safety `ptr` must be a valid `*mut ResultBuilder`.

Return the stash configuration.

Convert a C `MalboxPluginMeta` to a Rust `PluginMeta`. # Safety All non-null pointer fields in `meta` must point to valid, null-terminated C strings

Launch a sample using the platform-native process creation API. This is the default implementation of [`GuestPlugin::execute_sample`].

Delete a machine by ID.

A short description of what the plugin does. May be empty.

Deserialize a TOML value into a typed configuration. This helper allows providers to deserialize their configuration without depending on the toml cr

Cargo features the installed binaries should carry for `providers`, keeping the provisioner choices recorded in the manifest.

Tear down a libvirt domain and all its resources. Force-stops the domain if running, deletes all snapshots, removes the domain definition, and delete

Fetch all machines, ordered by ID.

Per-plugin latest-wins projection for a sample. Returns at most one `PluginReport` per `plugin_name` - the row from the most recent terminal task tha

Fetch a single machine by ID.

The prebuilt front-end SPA bundle. Architecture-independent (static HTML/JS), so it carries no arch suffix.

Insert a reference to an existing file (plugin-owned). The file is not copied or touched, and is never deleted by the stash.

Check if the server (plugin) is still connected.

Returns `true` if the plugin is actively running — either [`Ready`](Self::Ready) or [`Busy`](Self::Busy).

Convert a serde_json::Value back to a Python object via Python's json module.

Add a key-value list.

Create a [`GuestLogLayer`] that pushes into this bus.

Read a file from the work directory.

Push file contents into the work directory under `dest`.

Convert a Python object to a serde_json::Value via Python's json module.

Attach the plugin's native JSON as an escape hatch. Rarely needed - prefer typed blocks.

Recompile the installed binaries with `features` and swap them in.

Release matching an installed version, trying the canonical `v` tag prefix first. Resume and rebuild use this to pin to the installed version instead

Disable a provider. Returns `false` when it was not enabled. A default pointing at the removed provider moves to the first remaining one (or is droppe

Resolve execution parameters for a sample target on the given platform. The returned [`ExecParams`] are passed directly to the guest plugin's `Execut

Map a `ResourceError` to an appropriate HTTP response.

Read the entire sample file into memory. Be mindful of large samples.

Shutdown all workers gracefully.

Spawn a host plugin as a child process. The returned instance is in the [`Starting`](PluginLifecycle::Starting) state with the process handle attache

Shut down a running libvirt domain. With `force: false`, sends an ACPI shutdown signal and waits up to 5s for the guest to power off. Falls back to f