Method Reload

cli/plugins/manager.go:116–172

Reload limpa e recarrega todos os plugins do diretório de plugins.

()

// Reload limpa e recarrega todos os plugins do diretório de plugins.
func (m *Manager) Reload() {
	m.mu.Lock()
	defer m.mu.Unlock()

	m.plugins = make(map[string]Plugin)

	if err := os.MkdirAll(m.pluginsDir, 0o700); err != nil {
		m.logger.Error("Não foi possível criar o diretório de plugins", zap.String("path", m.pluginsDir), zap.Error(err))
		return
	}

	entries, err := os.ReadDir(m.pluginsDir)
	if err != nil {
		m.logger.Error("Erro ao ler o diretório de plugins", zap.Error(err))
		return
	}

	// Security (C3/H9): Verify plugin signatures before loading
	verifier := NewPluginVerifier()
	if verifier.AllowsUnsigned() {
		m.logger.Warn("SECURITY: unsigned plugins are allowed (CHATCLI_ALLOW_UNSIGNED_PLUGINS=true) — disable in production")
	}

	for _, entry := range entries {
		if strings.HasSuffix(entry.Name(), ".sig") || strings.HasPrefix(entry.Name(), ".") {
			continue // skip signature files and hidden files
		}
		pluginPath := filepath.Join(m.pluginsDir, entry.Name())

		// Verify plugin signature
		if err := verifier.VerifyPlugin(pluginPath); err != nil {
			if errors.Is(err, ErrNoSignature) && verifier.AllowsUnsigned() {
				m.logger.Warn("Loading unsigned plugin (dev mode)", zap.String("plugin", entry.Name()))
			} else {
				m.logger.Warn("Plugin signature verification failed, skipping",
					zap.String("plugin", entry.Name()), zap.Error(err))
				continue
			}
		}

		plugin, err := NewPluginFromPath(pluginPath)
		if err != nil {
			m.logger.Warn("Arquivo inválido no diretório de plugins, pulando.", zap.String("path", pluginPath), zap.Error(err))
			continue
		}
		m.plugins[plugin.Name()] = plugin
	}

	// Re-inject builtins that were not overridden by external plugins
	for name, bp := range m.builtins {
		if _, exists := m.plugins[name]; !exists {
			m.plugins[name] = bp
		}
	}

	m.logger.Info("Plugins recarregados.", zap.Int("count", len(m.plugins)))
}