zoi_plugins/

lib.rs

pub mod extension;

use anyhow::{Result, anyhow};
use colored::*;
use comfy_table::{Table as ComfyTable, presets::UTF8_FULL};
use dialoguer::{Confirm, Select, theme::ColorfulTheme};
use mlua::{Function, Lua, LuaSerdeExt, Table, Value};
use sha2::{Digest, Sha256};
use std::collections::HashMap;
use std::fs;
use std::path::{Path, PathBuf};
use zoi_core::utils;
use zoi_project as project;
use zoi_resolver::{local, resolve};

const PLUGIN_ENV_OVERRIDES_KEY: &str = "__ZOI_ENV_OVERRIDES";

/// Orchestrates Zoi's extensibility via global Lua plugins.
///
/// Plugins allow users to customize Zoi's behavior by:
/// - Registering new subcommands (`zoi.register_command`).
/// - Intercepting lifecycle events (`zoi.on_post_install`, etc.).
/// - Overriding tool versions at runtime (shim resolution).
///
/// Plugins are stored in `~/.zoi/plugins/` and are verified against
/// a `trusted_hashes.json` database to prevent unauthorized execution.
pub struct PluginManager {
    /// The initialized mlua Lua Virtual Machine.
    pub lua: Lua,
}

impl PluginManager {
    /// Initializes a new PluginManager and sets up the global Lua API.
    ///
    /// This injects the entire `zoi.*` API surface into the Lua environment,
    /// enabling plugins to interact with the filesystem, HTTP, archives,
    /// the UI, and the hook registry.
    pub fn new() -> Result<Self> {
        let lua = Lua::new();
        let manager = Self { lua };
        manager.setup_api()?;
        Ok(manager)
    }

    fn setup_api(&self) -> Result<()> {
        let zoi = self
            .lua
            .create_table()
            .map_err(|e| anyhow!(e.to_string()))?;

        self.lua
            .globals()
            .set(
                "__ZOI_COMMANDS",
                self.lua
                    .create_table()
                    .map_err(|e| anyhow!(e.to_string()))?,
            )
            .map_err(|e| anyhow!(e.to_string()))?;
        self.lua
            .globals()
            .set(
                "__ZOI_COMMAND_HELP",
                self.lua
                    .create_table()
                    .map_err(|e| anyhow!(e.to_string()))?,
            )
            .map_err(|e| anyhow!(e.to_string()))?;

        let register_command = self.lua.create_function(|lua, arg: Value| {
            let registry: Table = lua.globals().get("__ZOI_COMMANDS")?;
            let help_registry: Table = lua.globals().get("__ZOI_COMMAND_HELP")?;
            match arg {
                Value::Table(t) => {
                    let name: String = t.get("name")?;
                    let desc: String = t.get("description").unwrap_or_else(|_| "".to_string());
                    let callback: Function = t.get("callback")?;
                    registry.set(name.clone(), callback)?;
                    help_registry.set(name, desc)?;
                },
                _ => return Err(mlua::Error::RuntimeError("Invalid argument to register_command. Expected a table {name, description, callback}".to_string())),
            }
            Ok(())
        }).map_err(|e| anyhow!(e.to_string()))?;
        zoi.set("register_command", register_command)
            .map_err(|e| anyhow!(e.to_string()))?;

        let register_command_simple = self
            .lua
            .create_function(|lua, (name, callback): (String, Function)| {
                let registry: Table = lua.globals().get("__ZOI_COMMANDS")?;
                registry.set(name, callback)?;
                Ok(())
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        zoi.set("register_command_simple", register_command_simple)
            .map_err(|e| anyhow!(e.to_string()))?;

        self.lua
            .globals()
            .set(
                "__ZOI_HOOKS",
                self.lua
                    .create_table()
                    .map_err(|e| anyhow!(e.to_string()))?,
            )
            .map_err(|e| anyhow!(e.to_string()))?;
        self.lua
            .globals()
            .set(
                PLUGIN_ENV_OVERRIDES_KEY,
                self.lua
                    .create_table()
                    .map_err(|e| anyhow!(e.to_string()))?,
            )
            .map_err(|e| anyhow!(e.to_string()))?;
        let hooks = [
            "on_pre_install",
            "on_post_install",
            "on_pre_uninstall",
            "on_post_uninstall",
            "on_pre_sync",
            "on_post_sync",
            "on_rollback",
            "on_pre_create",
            "on_post_create",
            "on_pre_extension_add",
            "on_post_extension_add",
            "on_pre_extension_remove",
            "on_post_extension_remove",
            "on_resolve_shim_version",
            "on_project_install",
        ];
        for hook in hooks {
            let hook_name = hook.to_string();
            let register_hook = self
                .lua
                .create_function(move |lua, callback: Function| {
                    let registry: Table = lua.globals().get("__ZOI_HOOKS")?;
                    let hook_list: Table = match registry.get(hook_name.as_str()) {
                        Ok(t) => t,
                        Err(_) => {
                            let t = lua.create_table()?;
                            registry.set(hook_name.as_str(), t.clone())?;
                            t
                        }
                    };
                    hook_list.push(callback)?;
                    Ok(())
                })
                .map_err(|e| anyhow!(e.to_string()))?;
            zoi.set(hook, register_hook)
                .map_err(|e| anyhow!(e.to_string()))?;
        }

        let set_data = self
            .lua
            .create_function(|_, (key, value): (String, Value)| {
                let mut state = read_plugin_state().unwrap_or_default();
                let json_val: serde_json::Value = match value {
                    Value::String(s) => serde_json::Value::String(s.to_str()?.to_string()),
                    Value::Integer(i) => serde_json::Value::Number(i.into()),
                    Value::Number(n) => {
                        let Some(num) = serde_json::Number::from_f64(n) else {
                            return Err(mlua::Error::RuntimeError(
                                "Non-finite numbers are not supported for set_data".to_string(),
                            ));
                        };
                        serde_json::Value::Number(num)
                    }
                    Value::Boolean(b) => serde_json::Value::Bool(b),
                    _ => {
                        return Err(mlua::Error::RuntimeError(
                            "Unsupported value type for set_data".to_string(),
                        ));
                    }
                };
                state.insert(key, json_val);
                write_plugin_state(&state).map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                Ok(())
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        zoi.set("set_data", set_data)
            .map_err(|e| anyhow!(e.to_string()))?;

        let get_data = self
            .lua
            .create_function(|lua, key: String| {
                let state = read_plugin_state().unwrap_or_default();
                if let Some(val) = state.get(&key) {
                    lua.to_value(val)
                } else {
                    Ok(Value::Nil)
                }
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        zoi.set("get_data", get_data)
            .map_err(|e| anyhow!(e.to_string()))?;

        let list_installed = self
            .lua
            .create_function(|lua, _: ()| {
                let installed = local::get_installed_packages()
                    .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                lua.to_value(&installed)
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        zoi.set("list_installed", list_installed)
            .map_err(|e| anyhow!(e.to_string()))?;

        let get_package = self
            .lua
            .create_function(|lua, name: String| {
                let (pkg, _, _, _, _, _, _) =
                    resolve::resolve_package_and_version(&name, None, true, false)
                        .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                lua.to_value(&pkg)
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        zoi.set("get_package", get_package)
            .map_err(|e| anyhow!(e.to_string()))?;

        if let Ok(config) = project::config::load() {
            let project_table = self
                .lua
                .create_table()
                .map_err(|e| anyhow!(e.to_string()))?;
            project_table
                .set("name", config.name)
                .map_err(|e| anyhow!(e.to_string()))?;
            project_table
                .set("packages", config.pkgs)
                .map_err(|e| anyhow!(e.to_string()))?;
            zoi.set("project", project_table)
                .map_err(|e| anyhow!(e.to_string()))?;
        }

        let ui = self
            .lua
            .create_table()
            .map_err(|e| anyhow!(e.to_string()))?;
        let ui_print = self
            .lua
            .create_function(|_, (text, color): (String, Option<String>)| {
                let colored_text = match color.as_deref() {
                    Some("red") => text.red(),
                    Some("green") => text.green(),
                    Some("yellow") => text.yellow(),
                    Some("blue") => text.blue(),
                    Some("cyan") => text.cyan(),
                    Some("magenta") => text.magenta(),
                    _ => text.normal(),
                };
                println!("{}", colored_text);
                Ok(())
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        ui.set("print", ui_print)
            .map_err(|e| anyhow!(e.to_string()))?;

        let ui_confirm = self
            .lua
            .create_function(|_, prompt: String| {
                Ok(Confirm::with_theme(&ColorfulTheme::default())
                    .with_prompt(prompt)
                    .interact()
                    .unwrap_or(false))
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        ui.set("confirm", ui_confirm)
            .map_err(|e| anyhow!(e.to_string()))?;

        let ui_select = self
            .lua
            .create_function(|_, (prompt, options): (String, Vec<String>)| {
                let selection = Select::with_theme(&ColorfulTheme::default())
                    .with_prompt(prompt)
                    .items(&options)
                    .default(0)
                    .interact_opt()
                    .unwrap_or(None);
                Ok(selection.map(|s| s + 1))
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        ui.set("select", ui_select)
            .map_err(|e| anyhow!(e.to_string()))?;

        let ui_table = self
            .lua
            .create_function(|_, (headers, rows): (Vec<String>, Vec<Vec<String>>)| {
                let mut table = ComfyTable::new();
                table.load_preset(UTF8_FULL).set_header(headers);
                for row in rows {
                    table.add_row(row);
                }
                println!("{}", table);
                Ok(())
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        ui.set("table", ui_table)
            .map_err(|e| anyhow!(e.to_string()))?;
        zoi.set("ui", ui).map_err(|e| anyhow!(e.to_string()))?;

        let system = self
            .lua
            .create_table()
            .map_err(|e| anyhow!(e.to_string()))?;
        let platform = utils::get_platform().unwrap_or_else(|_| "unknown-unknown".to_string());
        let parts: Vec<&str> = platform.split('-').collect();
        system
            .set("os", parts.first().unwrap_or(&"unknown").to_string())
            .map_err(|e| anyhow!(e.to_string()))?;
        system
            .set("arch", parts.get(1).unwrap_or(&"unknown").to_string())
            .map_err(|e| anyhow!(e.to_string()))?;
        zoi.set("system", system)
            .map_err(|e| anyhow!(e.to_string()))?;
        zoi.set("version", env!("CARGO_PKG_VERSION"))
            .map_err(|e| anyhow!(e.to_string()))?;

        let shell = self
            .lua
            .create_function(|lua, cmd: String| {
                let env_overrides: Table = lua
                    .globals()
                    .get(PLUGIN_ENV_OVERRIDES_KEY)
                    .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;

                let mut command = if cfg!(target_os = "windows") {
                    let mut c = std::process::Command::new("pwsh");
                    c.arg("-Command").arg(&cmd);
                    c
                } else {
                    let mut c = std::process::Command::new("bash");
                    c.arg("-c").arg(&cmd);
                    c
                };

                for pair in env_overrides.pairs::<String, String>() {
                    let (key, value) =
                        pair.map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                    command.env(key, value);
                }

                let status = command.status();
                match status {
                    Ok(s) => Ok(s.code().unwrap_or(if s.success() { 0 } else { 1 })),
                    Err(e) => Err(mlua::Error::RuntimeError(e.to_string())),
                }
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        zoi.set("sh", shell).map_err(|e| anyhow!(e.to_string()))?;

        let fs_table = self
            .lua
            .create_table()
            .map_err(|e| anyhow!(e.to_string()))?;
        let fs_read = self
            .lua
            .create_function(|_, path: String| Ok(fs::read_to_string(path).ok()))
            .map_err(|e| anyhow!(e.to_string()))?;
        fs_table
            .set("read", fs_read)
            .map_err(|e| anyhow!(e.to_string()))?;

        let fs_write = self
            .lua
            .create_function(|_, (path, content): (String, String)| {
                Ok(fs::write(path, content).is_ok())
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        fs_table
            .set("write", fs_write)
            .map_err(|e| anyhow!(e.to_string()))?;

        let fs_exists = self
            .lua
            .create_function(|_, path: String| Ok(PathBuf::from(path).exists()))
            .map_err(|e| anyhow!(e.to_string()))?;
        fs_table
            .set("exists", fs_exists)
            .map_err(|e| anyhow!(e.to_string()))?;

        let fs_list = self
            .lua
            .create_function(|lua, path: String| {
                let mut entries = Vec::new();
                if let Ok(read_dir) = fs::read_dir(path) {
                    for entry in read_dir.flatten() {
                        entries.push(entry.file_name().to_string_lossy().to_string());
                    }
                }
                lua.to_value(&entries)
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        fs_table
            .set("list", fs_list)
            .map_err(|e| anyhow!(e.to_string()))?;

        let fs_delete = self
            .lua
            .create_function(|_, path: String| {
                let p = PathBuf::from(path);
                if p.is_dir() {
                    Ok(fs::remove_dir_all(p).is_ok())
                } else {
                    Ok(fs::remove_file(p).is_ok())
                }
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        fs_table
            .set("delete", fs_delete)
            .map_err(|e| anyhow!(e.to_string()))?;

        let fs_symlink = self
            .lua
            .create_function(|_, (target, link, is_dir): (String, String, bool)| {
                let target_path = PathBuf::from(target);
                let link_path = PathBuf::from(link);
                if is_dir {
                    Ok(utils::symlink_dir(&target_path, &link_path).is_ok())
                } else {
                    Ok(utils::symlink_file(&target_path, &link_path).is_ok())
                }
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        fs_table
            .set("symlink", fs_symlink)
            .map_err(|e| anyhow!(e.to_string()))?;

        let fs_copy = self
            .lua
            .create_function(|_, (src, dest): (String, String)| {
                let src_path = Path::new(&src);
                let dest_path = Path::new(&dest);
                if src_path.is_dir() {
                    Ok(utils::copy_dir_all(src_path, dest_path).is_ok())
                } else {
                    Ok(fs::copy(src_path, dest_path).is_ok())
                }
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        fs_table
            .set("copy", fs_copy)
            .map_err(|e| anyhow!(e.to_string()))?;

        zoi.set("fs", fs_table)
            .map_err(|e| anyhow!(e.to_string()))?;

        let archive_table = self
            .lua
            .create_table()
            .map_err(|e| anyhow!(e.to_string()))?;
        let archive_extract = self
            .lua
            .create_function(
                |_, (source, dest, strip): (String, String, Option<usize>)| {
                    let src_path = Path::new(&source);
                    let dest_path = Path::new(&dest);

                    if !dest_path.exists() {
                        let _ = fs::create_dir_all(dest_path);
                    }

                    let file = fs::File::open(src_path)
                        .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                    let archive_path_str = source.to_lowercase();

                    let strip_val = strip.unwrap_or(0);

                    fn safe_stripped_relative_path(
                        path: &Path,
                        strip: usize,
                    ) -> Result<Option<PathBuf>, std::io::Error> {
                        let mut sanitized = PathBuf::new();
                        let mut has_component = false;
                        for component in path.components().skip(strip) {
                            match component {
                                std::path::Component::Normal(part) => {
                                    sanitized.push(part);
                                    has_component = true;
                                }
                                std::path::Component::CurDir => {}
                                _ => {
                                    return Err(std::io::Error::new(
                                        std::io::ErrorKind::InvalidInput,
                                        format!(
                                            "Archive entry escapes destination: {}",
                                            path.display()
                                        ),
                                    ));
                                }
                            }
                        }
                        if has_component {
                            Ok(Some(sanitized))
                        } else {
                            Ok(None)
                        }
                    }

                    fn unpack_with_strip<R: std::io::Read>(
                        mut archive: tar::Archive<R>,
                        dest: &Path,
                        strip: usize,
                    ) -> Result<(), std::io::Error> {
                        for entry in archive.entries()? {
                            let mut entry = entry?;
                            let path = entry.path()?.to_path_buf();
                            let Some(stripped_path) = safe_stripped_relative_path(&path, strip)?
                            else {
                                continue;
                            };
                            entry.unpack(dest.join(stripped_path))?;
                        }
                        Ok(())
                    }

                    if archive_path_str.ends_with(".zip") {
                        let mut archive = zip::ZipArchive::new(file)
                            .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                        if strip_val > 0 {
                            for i in 0..archive.len() {
                                let mut file = archive
                                    .by_index(i)
                                    .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                                let path = PathBuf::from(file.name());
                                let Some(stripped_path) =
                                    safe_stripped_relative_path(&path, strip_val)
                                        .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?
                                else {
                                    continue;
                                };
                                let out_path = dest_path.join(stripped_path);
                                if file.is_dir() {
                                    fs::create_dir_all(&out_path)
                                        .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                                } else {
                                    if let Some(p) = out_path.parent() {
                                        fs::create_dir_all(p).map_err(|e| {
                                            mlua::Error::RuntimeError(e.to_string())
                                        })?;
                                    }
                                    let mut outfile = fs::File::create(&out_path)
                                        .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                                    std::io::copy(&mut file, &mut outfile)
                                        .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                                }
                            }
                        } else {
                            archive
                                .extract(dest_path)
                                .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                        }
                    } else if archive_path_str.ends_with(".tar.gz")
                        || archive_path_str.ends_with(".tgz")
                    {
                        let tar_gz = flate2::read::GzDecoder::new(file);
                        let archive = tar::Archive::new(tar_gz);
                        if strip_val > 0 {
                            unpack_with_strip(archive, dest_path, strip_val)
                                .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                        } else {
                            let mut archive = archive;
                            archive
                                .unpack(dest_path)
                                .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                        }
                    } else if archive_path_str.ends_with(".tar.zst") {
                        let tar_zst = zstd::stream::read::Decoder::new(file)
                            .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                        let archive = tar::Archive::new(tar_zst);
                        if strip_val > 0 {
                            unpack_with_strip(archive, dest_path, strip_val)
                                .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                        } else {
                            let mut archive = archive;
                            archive
                                .unpack(dest_path)
                                .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                        }
                    } else if archive_path_str.ends_with(".tar.xz") {
                        let tar_xz = xz2::read::XzDecoder::new(file);
                        let archive = tar::Archive::new(tar_xz);
                        if strip_val > 0 {
                            unpack_with_strip(archive, dest_path, strip_val)
                                .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                        } else {
                            let mut archive = archive;
                            archive
                                .unpack(dest_path)
                                .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                        }
                    } else {
                        return Err(mlua::Error::RuntimeError(format!(
                            "Unsupported archive format: {}",
                            source
                        )));
                    }
                    Ok(true)
                },
            )
            .map_err(|e| anyhow!(e.to_string()))?;
        archive_table
            .set("extract", archive_extract)
            .map_err(|e| anyhow!(e.to_string()))?;
        zoi.set("archive", archive_table)
            .map_err(|e| anyhow!(e.to_string()))?;

        let http_table = self
            .lua
            .create_table()
            .map_err(|e| anyhow!(e.to_string()))?;
        let http_get = self
            .lua
            .create_function(|_, url: String| {
                let client = reqwest::blocking::Client::builder()
                    .user_agent("zoi-plugin")
                    .build()
                    .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                match client.get(&url).send() {
                    Ok(resp) => Ok(resp.text().ok()),
                    Err(_) => Ok(None),
                }
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        http_table
            .set("get", http_get)
            .map_err(|e| anyhow!(e.to_string()))?;

        let http_download = self
            .lua
            .create_function(|_, (url, dest): (String, String)| {
                let mut response = reqwest::blocking::get(&url)
                    .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                if !response.status().is_success() {
                    return Ok(false);
                }
                let mut dest_file =
                    fs::File::create(dest).map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                std::io::copy(&mut response, &mut dest_file)
                    .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                Ok(true)
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        http_table
            .set("download", http_download)
            .map_err(|e| anyhow!(e.to_string()))?;

        let http_post = self
            .lua
            .create_function(|_, (url, body): (String, String)| {
                let client = reqwest::blocking::Client::builder()
                    .user_agent("zoi-plugin")
                    .build()
                    .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                match client.post(&url).body(body).send() {
                    Ok(resp) => Ok(resp.text().ok()),
                    Err(_) => Ok(None),
                }
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        http_table
            .set("post", http_post)
            .map_err(|e| anyhow!(e.to_string()))?;
        zoi.set("http", http_table)
            .map_err(|e| anyhow!(e.to_string()))?;

        let json_table = self
            .lua
            .create_table()
            .map_err(|e| anyhow!(e.to_string()))?;
        let json_parse = self
            .lua
            .create_function(|lua, json_str: String| {
                let parsed: serde_json::Value = serde_json::from_str(&json_str)
                    .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                lua.to_value(&parsed)
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        json_table
            .set("parse", json_parse)
            .map_err(|e| anyhow!(e.to_string()))?;

        let json_stringify = self
            .lua
            .create_function(|lua, value: Value| {
                let json_val: serde_json::Value = lua
                    .from_value(value)
                    .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                Ok(serde_json::to_string(&json_val).unwrap_or_default())
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        json_table
            .set("stringify", json_stringify)
            .map_err(|e| anyhow!(e.to_string()))?;
        zoi.set("json", json_table)
            .map_err(|e| anyhow!(e.to_string()))?;

        let env_table = self
            .lua
            .create_table()
            .map_err(|e| anyhow!(e.to_string()))?;
        let env_get = self
            .lua
            .create_function(|lua, name: String| {
                let env_overrides: Table = lua
                    .globals()
                    .get(PLUGIN_ENV_OVERRIDES_KEY)
                    .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;

                if let Some(value) = env_overrides
                    .get::<Option<String>>(name.as_str())
                    .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?
                {
                    return Ok(Some(value));
                }

                Ok(std::env::var(name).ok())
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        env_table
            .set("get", env_get)
            .map_err(|e| anyhow!(e.to_string()))?;

        let env_set = self
            .lua
            .create_function(|lua, (name, value): (String, String)| {
                let env_overrides: Table = lua
                    .globals()
                    .get(PLUGIN_ENV_OVERRIDES_KEY)
                    .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                env_overrides
                    .set(name, value)
                    .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                Ok(())
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        env_table
            .set("set", env_set)
            .map_err(|e| anyhow!(e.to_string()))?;
        zoi.set("env", env_table)
            .map_err(|e| anyhow!(e.to_string()))?;

        self.lua
            .globals()
            .set("zoi", zoi)
            .map_err(|e| anyhow!(e.to_string()))?;

        let plugin_dir = get_plugin_dir()?;
        let import_fn = self
            .lua
            .create_function(move |lua, file_name: String| {
                let path = plugin_dir.join(&file_name);
                if !path.exists() {
                    return Err(mlua::Error::RuntimeError(format!(
                        "File not found: {}",
                        path.display()
                    )));
                }
                let content = fs::read_to_string(&path)
                    .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                if let Some(ext) = path.extension().and_then(|s| s.to_str()) {
                    match ext {
                        "json" => {
                            let val: serde_json::Value = serde_json::from_str(&content)
                                .map_err(|e| mlua::Error::RuntimeError(e.to_string()))?;
                            return lua.to_value(&val);
                        }
                        _ => return lua.to_value(&content),
                    }
                }
                lua.to_value(&content)
            })
            .map_err(|e| anyhow!(e.to_string()))?;
        self.lua
            .globals()
            .set("IMPORT", import_fn)
            .map_err(|e| anyhow!(e.to_string()))?;

        Ok(())
    }

    pub fn load_all(&self, yes: bool) -> Result<()> {
        let plugin_dir = get_plugin_dir()?;
        if !plugin_dir.exists() {
            return Ok(());
        }
        let mut plugin_paths = Vec::new();
        for entry in fs::read_dir(plugin_dir)? {
            let entry = entry?;
            let path = entry.path();
            if path.extension().and_then(|s| s.to_str()) == Some("lua") {
                plugin_paths.push(path);
            }
        }
        plugin_paths.sort();

        let trusted_path = get_plugin_dir()?.join("trusted_hashes.json");
        let mut trusted: HashMap<String, String> = if trusted_path.exists() {
            let content = fs::read_to_string(&trusted_path)?;
            serde_json::from_str(&content).unwrap_or_default()
        } else {
            HashMap::new()
        };
        let mut trusted_changed = false;

        for path in plugin_paths {
            let script = fs::read_to_string(&path)?;

            let mut hasher = Sha256::new();
            hasher.update(script.as_bytes());
            let hash = hex::encode(hasher.finalize());

            let plugin_name = path
                .file_name()
                .unwrap_or_default()
                .to_string_lossy()
                .to_string();

            let is_trusted = if let Some(known_hash) = trusted.get(&plugin_name) {
                known_hash == &hash
            } else {
                false
            };

            if !is_trusted {
                if yes {
                    println!(
                        "\n{}: Skipping untrusted plugin: {}. Run Zoi interactively to trust it.",
                        "Warning".yellow().bold(),
                        plugin_name.cyan()
                    );
                    continue;
                } else {
                    println!(
                        "\n{}: Untrusted plugin detected: {}",
                        "SECURITY WARNING".yellow().bold(),
                        plugin_name.cyan()
                    );
                    println!("Plugins can execute arbitrary commands and modify your system.");
                    if utils::ask_for_confirmation(
                        "Do you trust this plugin and want to execute it?",
                        false,
                    ) {
                        trusted.insert(plugin_name.clone(), hash);
                        trusted_changed = true;
                    } else {
                        println!("Skipping untrusted plugin: {}", plugin_name);
                        continue;
                    }
                }
            }

            let script_wrapper = format!(
                "local old_reg = zoi.register_command; zoi.register_command = function(a, b) if type(a) == 'string' then zoi.register_command_simple(a, b) else old_reg(a) end end; {}",
                script
            );
            self.lua
                .load(&script_wrapper)
                .exec()
                .map_err(|e| anyhow!("Plugin error in {}: {}", path.display(), e))?;
        }

        if trusted_changed {
            let content = serde_json::to_string_pretty(&trusted)?;
            fs::write(trusted_path, content)?;
        }

        Ok(())
    }

    pub fn trigger_hook(&self, hook_name: &str, arg: Option<Value>) -> Result<()> {
        let registry: Table = self
            .lua
            .globals()
            .get("__ZOI_HOOKS")
            .map_err(|e| anyhow!(e.to_string()))?;
        if let Ok(hook_list) = registry.get::<Table>(hook_name) {
            for callback in hook_list.sequence_values::<Function>() {
                let callback = callback.map_err(|e| anyhow!(e.to_string()))?;
                if let Some(a) = &arg {
                    callback
                        .call::<()>(a.clone())
                        .map_err(|e| anyhow!(e.to_string()))?;
                } else {
                    callback
                        .call::<()>(())
                        .map_err(|e| anyhow!(e.to_string()))?;
                }
            }
        }
        Ok(())
    }

    pub fn trigger_hook_nonfatal(&self, hook_name: &str, arg: Option<Value>) {
        if let Err(error) = self.trigger_hook(hook_name, arg) {
            eprintln!(
                "Warning: hook '{}' failed after the operation completed: {}",
                hook_name, error
            );
        }
    }

    pub fn trigger_resolve_shim_version(&self, bin_name: &str) -> Result<Option<String>> {
        let registry: Table = self
            .lua
            .globals()
            .get("__ZOI_HOOKS")
            .map_err(|e| anyhow!(e.to_string()))?;

        if let Ok(hook_list) = registry.get::<Table>("on_resolve_shim_version") {
            for callback in hook_list.sequence_values::<Function>() {
                let callback = callback.map_err(|e| anyhow!(e.to_string()))?;
                let result: Option<String> = callback
                    .call(bin_name)
                    .map_err(|e| anyhow!(e.to_string()))?;
                if result.is_some() {
                    return Ok(result);
                }
            }
        }
        Ok(None)
    }

    pub fn trigger_project_install_hook(&self) -> Result<bool> {
        let registry: Table = self
            .lua
            .globals()
            .get("__ZOI_HOOKS")
            .map_err(|e| anyhow!(e.to_string()))?;

        if let Ok(hook_list) = registry.get::<Table>("on_project_install") {
            for callback in hook_list.sequence_values::<Function>() {
                let callback = callback.map_err(|e| anyhow!(e.to_string()))?;
                let handled: bool = callback.call(()).map_err(|e| anyhow!(e.to_string()))?;
                if handled {
                    return Ok(true);
                }
            }
        }
        Ok(false)
    }

    pub fn run_command(&self, name: &str, args: Vec<String>) -> Result<bool> {
        let registry: Table = self
            .lua
            .globals()
            .get("__ZOI_COMMANDS")
            .map_err(|e| anyhow!(e.to_string()))?;
        let callback: Value = registry.get(name).map_err(|e| anyhow!(e.to_string()))?;
        if let Value::Function(func) = callback {
            func.call::<()>(args).map_err(|e| anyhow!(e.to_string()))?;
            Ok(true)
        } else {
            Ok(false)
        }
    }

    pub fn list_commands(&self) -> Result<Vec<(String, String)>> {
        let registry: Table = self
            .lua
            .globals()
            .get("__ZOI_COMMANDS")
            .map_err(|e| anyhow!(e.to_string()))?;
        let help_registry: Table = self
            .lua
            .globals()
            .get("__ZOI_COMMAND_HELP")
            .map_err(|e| anyhow!(e.to_string()))?;
        let mut commands = Vec::new();
        for pair in registry.pairs::<String, Value>() {
            let (name, _) = pair.map_err(|e| anyhow!(e.to_string()))?;
            let desc: String = help_registry
                .get(name.clone())
                .unwrap_or_else(|_| "".to_string());
            commands.push((name, desc));
        }
        Ok(commands)
    }
}

pub fn get_plugin_dir() -> Result<PathBuf> {
    let home_dir = home::home_dir().ok_or_else(|| anyhow!("Could not find home directory."))?;
    let plugin_dir = home_dir.join(".zoi").join("plugins");
    if !plugin_dir.exists() {
        fs::create_dir_all(&plugin_dir)?;
    }
    Ok(plugin_dir)
}

fn read_plugin_state() -> Result<HashMap<String, serde_json::Value>> {
    let path = get_plugin_dir()?.join("state.json");
    if !path.exists() {
        return Ok(HashMap::new());
    }
    let content = fs::read_to_string(path)?;
    Ok(serde_json::from_str(&content).unwrap_or_default())
}

fn write_plugin_state(state: &HashMap<String, serde_json::Value>) -> Result<()> {
    let path = get_plugin_dir()?.join("state.json");
    let content = serde_json::to_string_pretty(state)?;
    fs::write(path, content)?;
    Ok(())
}