{"version":"2.1.242","anchor":"plugin-model-calls-are-capped-by-an-allowlist-and-a-session-","canonical_anchor":"plugin-model-calls-are-capped-by-an-allowlist-and-a-session-","heading":"Plugin model calls are capped by an allowlist and a session budget","tier":"internal","area":"Plugins","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.242\/e\/plugin-model-calls-are-capped-by-an-allowlist-and-a-session-","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.242","markdown":"### Plugin model calls are capped by an allowlist and a session budget\n\nPlugin-triggered model calls are limited to allowed models and a per-session token budget.\n\n**What**\n\nWhen a plugin asks Claude Code to run a model completion, the request is checked against the organization's allowed models and a per-session token budget, so a misbehaving plugin cannot spend a session's capacity.\n\n**Details**\n\n- The requested maximum token count must be a whole number within a cap.\n- An estimated cost is reserved before the request and reconciled against actual usage afterwards.\n- Passing a fraction of the budget produces a warning log; passing the budget makes the call throw.\n- Behind the tengu_plugin_hooks_modules rollout flag.\n\n**Evidence**\n\n`$.model.complete: the session's model budget for this plugin is spent`\n\n- Area: Plugins\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 3\/5"}