Build & ship
Casa Cloner plugins.

Plugins are single-file Python modules that the Casa Cloner desktop app loads at runtime. Each plugin ships with a JSON manifest.json declaring its identity, requested permissions, and the hooks it implements. They're distributed through the marketplace at /plugins — only versions reviewed by an admin become installable.

The smallest plugin that can possibly work:

def on_load(api):
    api.log("hello from plugin '%s'" % api.slug)

def on_message(api, message):
    if message.content == "!ping":
        api.log("pong")

{
  "id": "hello-world",
  "name": "Hello World",
  "version": "1.0.0",
  "description": "Logs a line on load and replies to !ping.",
  "author": "your-username",
  "category": "fun",
  "permissions": [],
  "hooks": ["on_load", "on_message"]
}

Required fields are marked. Anything not listed is ignored by the loader — custom keys are fine but won't survive review unless they're justified.

Every hook receives the api object as its first argument. That object is the only legitimate way to talk to the host — there are no globally importable host modules.

def on_load(api):
    api.log("auto-react loaded")

def on_message(api, message):
    if api.has_permission("storage.local"):
        emoji = api.storage_get("emoji", "👍")
        # ... react logic ...

def on_unload(api):
    api.log("auto-react unloaded")

• api.slug, api.manifest, api.permissions — read-only metadata.
• api.log(message: str) — write to the host log (truncated at 2000 chars).
• api.has_permission(name: str) -> bool — guard sensitive paths.
• api.storage_get(key, default=None) / api.storage_set(key, value) — JSON KV store, gated on storage.local.

Permissions are declared up-front in the manifest and surfaced to the user before install. A plugin asking for a permission it didn't declare simply fails at runtime.

Plugins run inside a custom __builtins__ with the most dangerous primitives stripped, plus an import allow-list. This is defence in depth — the real isolation is server-side review.

• eval, exec, compile
• open — use api.storage_* instead
• input, breakpoint

The following modules cannot be imported at all:

subprocess, ctypes, ctypes.util, multiprocessing,
socket, ssl, smtplib, ftplib, telnetlib,
shutil, pickle, marshal

requests, urllib, urllib.request, and http.client only import successfully when the manifest declares http.request.

All endpoints accept Authorization: Bearer casa_… (API token) or a session cookie. Mutating endpoints are rate-limited per IP.

• Approved versions are immutable. Push a new version instead of editing.
• Bumping MAJOR implies an API/permission change and may force users to re-consent on update.
• Yanking a version requires admin action — submit a report through support.