Plugin System

​

Four plugin types

​

Plugin sandbox

• No direct filesystem access outside the plugin directory
• No eval(), exec(), or system() calls
• Database queries through the provided query builder only
• Outbound HTTP via the plugin HTTP client with configurable allow-lists

​

Capabilities

​

Hook system

• Actions - fire-and-forget callbacks (react to events)
• Filters - pipeline callbacks that transform data

// React to a payment completion (action)
$events->addAction('payment.transaction.completed', function (array $txn): void {
    sendNotification($txn);
});

// Add a surcharge (filter)
$events->addFilter('payment.fee.calculate', function (string $fee, array $ctx): string {
    return bcadd($fee, '1.00', 2);
});

​

Documentation tree

​

Related pages

• Directory structure
• Manifest reference
• Hooks reference
• Plugin lifecycle