Plugin Lifecycle

Startup

1. plugin_loader.scan() reads plugins/ (system band) then user/plugins/ (user band)
2. Each plugin.json is validated and signature-checked
3. Enabled plugins get hooks, tools, voice commands, routes, and schedules registered
4. Scheduler tasks are deferred if the scheduler hasn't initialized yet

Same name in both bands: the user-band copy wins — it's scanned second and replaces the system entry, with a warning in the log ('<name>' (user band) shadows the system copy at … — only the user copy will load). The store installer refuses a name that collides with a shipped plugin, so this only happens when a folder is placed in user/plugins/ by hand (a local fork of a bundled plugin). Delete or rename the user copy to get the shipped one back.

Live Toggle

Settings > Plugins calls PUT /api/webui/plugins/toggle/{name}:

• Enable: Loads immediately — all capabilities register
• Disable: Unloads immediately — hooks, tools, routes, schedules removed

Unsigned/tampered plugins return 403 and the toggle reverts.

Hot Reload (Dev)

POST /api/plugins/{name}/reload unloads and reloads a single plugin.

Set SAPPHIRE_DEV=1 to enable file watching — plugins auto-reload when .py or .json files change (2s polling).

If reload fails, the plugin stays unloaded. No half-loaded state.

Rescan

POST /api/plugins/rescan discovers new or removed plugin folders without restart. Returns {"added": [...], "removed": [...]}.

Error Isolation

A buggy plugin never crashes the system. If a hook handler throws an exception, it's logged and skipped — the next handler fires normally. Tool execution errors are caught and returned as error messages to the AI.

Chat Lifecycle

Plugin data can also be scoped to a chat instead of the plugin. Rows written through plugin_loader.get_chat_state(name) live in the chat database, and core owns their whole life: carried across a rename, encrypted when the chat goes private, deleted with the chat (public and private alike, inside the delete transaction). Plugins no longer register chat_renamed / chat_deleted to shepherd that data — those hooks are for chat-keyed things kept elsewhere. See Chat-Scoped State.

API Reference

Plugin List Response

{
  "plugins": [
    {
      "name": "ssh",
      "enabled": true,
      "locked": false,
      "title": "SSH",
      "settingsUI": "plugin",
      "verified": true,
      "verify_msg": "verified",
      "version": "1.0.0",
      "author": "sapphire",
      "url": "https://sapphireblue.dev"
    }
  ],
  "locked": ["setup-wizard", "backup", "continuity"]
}

Reference for AI

• Boot: plugin_loader.scan() reads plugins/ (system band) then user/plugins/ (user band) — a same-named user-band copy SHADOWS the system one (warned in the log; the installer refuses such a name, so it means a hand-placed fork); each manifest is validated and signature-checked; enabled plugins register hooks, tools, voice commands, routes, schedules; scheduler tasks defer until the scheduler initializes.
• Live toggle: PUT /api/webui/plugins/toggle/{name} — enable loads immediately, disable unloads immediately; unsigned/tampered plugins return 403 and the toggle reverts.
• Hot reload: POST /api/plugins/{name}/reload; a failed reload leaves the plugin unloaded — no half-loaded state. SAPPHIRE_DEV=1 enables the file watcher (auto-reload on .py/.json changes, polled).
• Rescan: POST /api/plugins/rescan → {"added": [...], "removed": [...]} without restart.
• The plugins_ready hook fires after the boot scan AND after reload, rescan, and toggle-on — handlers must be idempotent (see hooks.md).
• Error isolation: a hook handler exception is logged and skipped (next handler fires); tool execution errors are returned to the AI as error messages.
• Chat-scoped rows (plugin_loader.get_chat_state(name)) are core-managed: carried through rename, encrypted on vault, deleted inside the chat-delete transaction BEFORE chat_deleted fires (no archive-on-delete possible from that hook). They survive a chat clear.
• Key endpoints: GET /api/webui/plugins (list), GET/PUT/DELETE /api/webui/plugins/{name}/settings, GET /plugin-web/{name}/{path} (web assets), /api/plugin/{name}/{path} (custom routes, auth enforced).