langbot-plugin 0.7.3__tar.gz → 0.7.4__tar.gz

{langbot_plugin-0.7.3 → langbot_plugin-0.7.4}/ARCHITECTURE.md

@@ -218,6 +218,15 @@ stable `dependency_prepare_failed` desired-state failure. Pip control options in
 an artifact's `requirements.txt` are rejected because only Runtime configuration
 may select indexes or trusted hosts.
 
+The dependency admission path has one bounded historical ABI exception: nine
+explicit `langbot-team` archive identities with exact raw SHA-256 digests and
+`langbot-plugin==0.6.1` may use the Runtime-owned SDK **0.7.4** in `dedicated`
+mode only. Artifact bytes are verified before extraction; a changed archive,
+identity, requirement, Runtime version, or shared execution mode fails normal
+SDK pin validation. This does not issue a certificate or change Core placement
+eligibility, and it does not install an older SDK into a worker. Cache schema is
+bumped so pre-exception dependency environments are never silently reused.
+
 Workers in the shared Runtime profile launch through nsjail with policy-owned
 cgroup CPU, memory, and
 PID limits plus file/process rlimits. If `require_hard_limits` is true, missing

{langbot_plugin-0.7.3 → langbot_plugin-0.7.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: langbot-plugin
-Version: 0.7.3
+Version: 0.7.4
 Summary: This package contains the SDK, CLI for building plugins for LangBot, plus the runtime for hosting LangBot plugins
 Project-URL: Homepage, https://langbot.app
 Project-URL: Repository, https://github.com/langbot-app/langbot-plugin-sdk

{langbot_plugin-0.7.3 → langbot_plugin-0.7.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "langbot-plugin"
-version = "0.7.3"
+version = "0.7.4"
 description = "This package contains the SDK, CLI for building plugins for LangBot, plus the runtime for hosting LangBot plugins"
 readme = "README.md"
 authors = [

{langbot_plugin-0.7.3 → langbot_plugin-0.7.4}/src/langbot_plugin/runtime/plugin/dependency_environment.py

@@ -21,7 +21,7 @@ from packaging.version import InvalidVersion, Version
 from langbot_plugin.runtime.plugin.artifact import PluginArtifact
 
 
-_ENVIRONMENT_SCHEMA_VERSION = 2
+_ENVIRONMENT_SCHEMA_VERSION = 3
 _READY_MARKER = ".ready.json"
 _MAX_REQUIREMENTS_BYTES = 1024 * 1024
 _MAX_REQUIREMENT_COUNT = 1024
@@ -30,6 +30,19 @@ _MAX_ENVIRONMENT_TOTAL_BYTES = 2 * 1024 * 1024 * 1024
 _SHA256_PATTERN = re.compile(r"^[0-9a-f]{64}$")
 _RUNTIME_PROVIDED_DISTRIBUTIONS = frozenset({"langbot-plugin"})
 _RUNTIME_SDK_COMPATIBILITY_SERIES = (0, 6)
+# Raw archive SHA-256 digests, not normalized certification digests. This is
+# dependency ABI admission only; it never grants certification or shared slots.
+_LEGACY_DEDICATED_SDK_061 = {
+    ("langbot-team", "CozeAgent", "0.1.10"): "90d9e1adbf456fd5e55ab8e022c26a17d272bf834104d711fff390c3649dc7a4",
+    ("langbot-team", "DashScopeAgent", "0.1.10"): "ca9fe3b6cf3d891c0d5f5ef6c711c25b20a922e8fe110778997314a1f8b0559e",
+    ("langbot-team", "DeerFlowAgent", "0.1.10"): "b35f551f9a9498f1f33d2596230725d3db1f13852edcb74330bc4a4dd681c6c9",
+    ("langbot-team", "DifyAgent", "0.1.10"): "1dd9cb4140bf0c2f848ecd648210b8cf7c9a0f520575ddc61e91a704e3ea3280",
+    ("langbot-team", "LangflowAgent", "0.1.10"): "b582250f2bf46e758fd904c52dea0ee6496626d61be6096a44fb9b34684583a5",
+    ("langbot-team", "N8nAgent", "0.1.10"): "0eee26b0101d166385425049727c0bf433582615d507fa36efc456b78cecac4a",
+    ("langbot-team", "TboxAgent", "0.1.8"): "387a02a2bed698b04f119042bab19c2400e53a433c6f0451a566e4c33807896f",
+    ("langbot-team", "WeKnoraAgent", "0.1.10"): "95dddd70a6f768660bd2de3adaebbe585b3aa42de7ad6ddb5a9fb6777590c9cc",
+    ("langbot-team", "LocalAgent", "0.1.10"): "a08a3f33cc10f5292d5ebafa58af1b993c8b89dbe6692df7895e924ffdd88da3",
+}
 
 
 class DependencyEnvironmentPreparationError(RuntimeError):
@@ -80,8 +93,11 @@ class PluginDependencyEnvironmentStore:
         *,
         runtime_fingerprint: str,
         installer: DependencyInstaller,
+        execution_mode: str | None = None,
     ) -> PluginDependencyEnvironment:
-        requirements, requirements_digest = self._read_requirements(artifact)
+        requirements, requirements_digest = self._read_requirements(
+            artifact, execution_mode=execution_mode
+        )
         digest = self._environment_digest(
             artifact.digest,
             requirements_digest,
@@ -262,6 +278,8 @@ class PluginDependencyEnvironmentStore:
     @staticmethod
     def _read_requirements(
         artifact: PluginArtifact,
+        *,
+        execution_mode: str | None = None,
     ) -> tuple[tuple[str, ...], str]:
         requirements_path = artifact.code_path / "requirements.txt"
         try:
@@ -318,10 +336,27 @@ class PluginDependencyEnvironmentStore:
                     ) from exc
                 # Validate the already-installed Runtime SDK, including beta
                 # releases, rather than filtering candidates for installation.
-                if not PluginDependencyEnvironmentStore._runtime_sdk_requirement_satisfied(
+                compatible = PluginDependencyEnvironmentStore._runtime_sdk_requirement_satisfied(
                     requirement,
                     runtime_version,
+                )
+                if (
+                    not compatible
+                    and runtime_version == "0.7.4"
+                    and line == "langbot-plugin==0.6.1"
+                    and execution_mode == "dedicated"
                 ):
+                    identity = (
+                        getattr(artifact, "plugin_author", None),
+                        getattr(artifact, "plugin_name", None),
+                        getattr(artifact, "plugin_version", None),
+                    )
+                    compatible = (
+                        all(isinstance(part, str) for part in identity)
+                        and _LEGACY_DEDICATED_SDK_061.get(identity)  # type: ignore[arg-type]
+                        == getattr(artifact, "digest", None)
+                    )
+                if not compatible:
                     raise DependencyEnvironmentPreparationError(
                         "Plugin requires "
                         f"{requirement}, but the Runtime provides "

{langbot_plugin-0.7.3 → langbot_plugin-0.7.4}/src/langbot_plugin/runtime/plugin/mgr.py

@@ -1106,6 +1106,7 @@ class PluginManager:
                         await self.worker_launcher.prepare_dependency_environment(
                             self.dependency_environment_store,
                             artifact,
+                            execution_mode=execution_mode.value,
                         )
                     )
                 except DependencyEnvironmentPreparationError as exc:

{langbot_plugin-0.7.3 → langbot_plugin-0.7.4}/src/langbot_plugin/runtime/plugin/worker_launcher.py

@@ -262,6 +262,8 @@ class PluginWorkerLauncher:
         self,
         store: PluginDependencyEnvironmentStore,
         artifact: PluginArtifact,
+        *,
+        execution_mode: str | None = None,
     ) -> PluginDependencyEnvironment:
         """Prepare artifact dependencies before issuing a worker capability."""
 
@@ -275,6 +277,7 @@ class PluginWorkerLauncher:
             artifact,
             runtime_fingerprint=self.dependency_runtime_fingerprint(),
             installer=installer,
+            execution_mode=execution_mode,
         )
 
     def dependency_runtime_fingerprint(self) -> str:

langbot_plugin-0.7.4/src/langbot_plugin/version.py

@@ -0,0 +1 @@
+__version__ = "0.7.4"

{langbot_plugin-0.7.3 → langbot_plugin-0.7.4}/tests/packaging/test_release_metadata.py

@@ -11,5 +11,5 @@ def test_stable_release_metadata_is_consistent() -> None:
         (root / "src/langbot_plugin/version.py").read_text(encoding="utf-8").strip()
     )
 
-    assert project["project"]["version"] == "0.7.3"
-    assert source_version == '__version__ = "0.7.3"'
+    assert project["project"]["version"] == "0.7.4"
+    assert source_version == '__version__ = "0.7.4"'

langbot_plugin-0.7.4/tests/runtime/plugin/test_exact_dify_real_worker.py

@@ -0,0 +1,70 @@
+"""Real stdio worker smoke for exact DifyAgent; no vendor credentials used."""
+import asyncio
+import json
+import os
+import sys
+from pathlib import Path
+
+import pytest
+
+from langbot_plugin.api.entities.builtin.runner.context import RunnerContext
+from langbot_plugin.api.entities.builtin.runner.trigger import AgentTrigger
+from langbot_plugin.api.entities.builtin.runner.event import AgentEventContext
+from langbot_plugin.api.entities.builtin.runner.input import AgentInput
+from langbot_plugin.api.entities.builtin.runner.delivery import DeliveryContext
+from langbot_plugin.api.entities.builtin.runner.resources import AgentResources
+from langbot_plugin.api.entities.builtin.runner.runtime import AgentRuntimeContext
+from langbot_plugin.entities.io.context import InstallationBinding
+from langbot_plugin.runtime.plugin.artifact import PluginArtifactStore
+from langbot_plugin.runtime.plugin.dependency_environment import _LEGACY_DEDICATED_SDK_061
+
+
+@pytest.mark.asyncio
+async def test_exact_archive_real_worker_run_runner(tmp_path):
+    archive = Path('/tmp/dify-legacy-exact.lbpkg')
+    if not archive.is_file():
+        pytest.skip('Exact archive unavailable')
+    digest = _LEGACY_DEDICATED_SDK_061[('langbot-team', 'DifyAgent', '0.1.10')]
+    code = PluginArtifactStore(tmp_path).install_package(archive.read_bytes(), digest).code_path
+    binding = InstallationBinding(instance_uuid='probe', workspace_uuid='workspace', placement_generation=1, installation_uuid='dify', runtime_revision=1, artifact_digest=digest)
+    env = dict(os.environ, LANGBOT_PLUGIN_REGISTRATION_CAPABILITY='x'*40, LANGBOT_PLUGIN_RUNTIME_PROFILE='shared', LANGBOT_PLUGIN_FILE_STORAGE_DIR=str(tmp_path/'transfer'), PYTHONUNBUFFERED='1')
+    proc = await asyncio.create_subprocess_exec(sys.executable, '-m', 'langbot_plugin.cli.__init__', 'run', '-s', '--prod', cwd=code, env=env, stdin=asyncio.subprocess.PIPE, stdout=asyncio.subprocess.PIPE, stderr=asyncio.subprocess.PIPE)
+
+    async def read():
+        while True:
+            line = await asyncio.wait_for(proc.stdout.readline(), 25)
+            if not line:
+                raise AssertionError('Worker exited: ' + (await proc.stderr.read()).decode()[-3000:])
+            try:
+                return json.loads(line)
+            except json.JSONDecodeError:
+                continue
+
+    async def send(msg):
+        proc.stdin.write((json.dumps(msg)+'\n').encode()); await proc.stdin.drain()
+
+    async def response():
+        while True:
+            result = await read()
+            if 'action' not in result:
+                return result
+            await send(dict(seq_id=result['seq_id'], code=0, message='ok', data={'bots': []}))
+
+    try:
+        register = await read()
+        assert register['action'] == 'register_plugin'
+        await send(dict(seq_id=register['seq_id'], code=0, message='ok', data={}))
+        await send(dict(seq_id=100, action='initialize_plugin', data={'plugin_settings': {'enabled': True, 'priority': 1, 'plugin_config': {}}}, context=binding.model_dump()))
+        initialized = await response()
+        assert initialized['code'] == 0, initialized
+        context = RunnerContext(run_id='exact_dify_probe', trigger=AgentTrigger(type='message.received'), event=AgentEventContext(event_id='probe', event_type='message.received', source='probe'), input=AgentInput(text='Hello'), delivery=DeliveryContext(surface='test'), resources=AgentResources(), runtime=AgentRuntimeContext())
+        await send(dict(seq_id=101, action='run_runner', data={'runner_name': 'default', 'context': context.model_dump(mode='json')}, context=binding.model_dump()))
+        result = await response()
+        assert result['code'] == 0, result
+        assert result['data']['type'] == 'run.failed', result
+        assert result['data']['data']['code'] == 'dify.config_invalid', result
+        print('REAL_RUNNER_RESULT', result['data']['type'], result['data']['data']['code'])
+    finally:
+        if proc.returncode is None:
+            proc.terminate()
+            await proc.wait()

langbot_plugin-0.7.4/tests/runtime/plugin/test_exact_legacy_sdk_compat.py

@@ -0,0 +1,75 @@
+"""Exact, dedicated-only SDK pin admission for nine reviewed marketplace archives."""
+import hashlib
+import importlib.metadata
+from pathlib import Path
+
+import pytest
+
+from langbot_plugin.runtime.plugin.artifact import PluginArtifact, PluginArtifactStore
+from langbot_plugin.runtime.plugin.dependency_environment import (
+    DependencyEnvironmentPreparationError,
+    PluginDependencyEnvironmentStore,
+    _LEGACY_DEDICATED_SDK_061,
+)
+
+
+@pytest.fixture
+def runtime_074(monkeypatch):
+    monkeypatch.setattr(importlib.metadata, "version", lambda name: "0.7.4")
+
+
+@pytest.mark.parametrize("identity,digest", sorted(_LEGACY_DEDICATED_SDK_061.items()))
+def test_only_exact_verified_identity_and_digest_in_dedicated_mode(
+    tmp_path, runtime_074, identity, digest
+):
+    code = tmp_path / "code"
+    code.mkdir()
+    (code / "requirements.txt").write_text("langbot-plugin==0.6.1\nhttpx>=0.28.1\n")
+
+    def artifact(*, actual_digest=digest, actual_identity=identity):
+        return PluginArtifact(actual_digest, tmp_path, code, *actual_identity)
+
+    assert PluginDependencyEnvironmentStore._read_requirements(
+        artifact(), execution_mode="dedicated"
+    )[0] == ("httpx>=0.28.1",)
+    for mode in (None, "shared-runtime-v1", "unexpected"):
+        with pytest.raises(DependencyEnvironmentPreparationError, match="Runtime provides"):
+            PluginDependencyEnvironmentStore._read_requirements(artifact(), execution_mode=mode)
+    with pytest.raises(DependencyEnvironmentPreparationError, match="Runtime provides"):
+        PluginDependencyEnvironmentStore._read_requirements(
+            artifact(actual_digest="0" * 64), execution_mode="dedicated"
+        )
+    with pytest.raises(DependencyEnvironmentPreparationError, match="Runtime provides"):
+        PluginDependencyEnvironmentStore._read_requirements(
+            artifact(actual_identity=("other-author", identity[1], identity[2])),
+            execution_mode="dedicated",
+        )
+    (code / "requirements.txt").write_text("langbot-plugin==0.6.2\n")
+    with pytest.raises(DependencyEnvironmentPreparationError, match="Runtime provides"):
+        PluginDependencyEnvironmentStore._read_requirements(artifact(), execution_mode="dedicated")
+
+
+def test_runtime_version_and_downloaded_archive_are_exact(tmp_path, monkeypatch):
+    archive = Path("/tmp/dify-legacy-exact.lbpkg")
+    if not archive.is_file():
+        pytest.skip("Exact downloaded DifyAgent archive unavailable")
+    digest = _LEGACY_DEDICATED_SDK_061[("langbot-team", "DifyAgent", "0.1.10")]
+    package = archive.read_bytes()
+    assert hashlib.sha256(package).hexdigest() == digest
+    store = PluginArtifactStore(tmp_path)
+    with pytest.raises(ValueError, match="digest mismatch"):
+        store.install_package(package + b"tampered", digest)
+    artifact = store.install_package(package, digest)
+    monkeypatch.setattr(importlib.metadata, "version", lambda name: "0.7.4")
+    assert PluginDependencyEnvironmentStore._read_requirements(
+        artifact, execution_mode="dedicated"
+    )[0] == ("pydantic>=2.0.0", "httpx>=0.28.1")
+    with pytest.raises(DependencyEnvironmentPreparationError, match="Runtime provides"):
+        PluginDependencyEnvironmentStore._read_requirements(
+            artifact, execution_mode="shared-runtime-v1"
+        )
+    monkeypatch.setattr(importlib.metadata, "version", lambda name: "0.7.5")
+    with pytest.raises(DependencyEnvironmentPreparationError, match="Runtime provides"):
+        PluginDependencyEnvironmentStore._read_requirements(
+            artifact, execution_mode="dedicated"
+        )

{langbot_plugin-0.7.3 → langbot_plugin-0.7.4}/tests/runtime/plugin/test_installation_manager.py

@@ -95,7 +95,7 @@ def _manager(tmp_path) -> tuple[RuntimeContext, PluginManager]:
     return context, manager
 
 
-async def _prepare_environment(store, artifact):
+async def _prepare_environment(store, artifact, *, execution_mode=None):
     root = store.base_path / "test-shared-environment"
     site_packages = root / "site-packages"
     site_packages.mkdir(parents=True, exist_ok=True)
@@ -201,7 +201,7 @@ async def test_certified_same_digest_installations_share_one_pool_worker(
     binding_b = _binding("installation-b", digest, workspace_uuid="workspace-b")
     scheduled = []
 
-    async def prepare(store, artifact):
+    async def prepare(store, artifact, *, execution_mode=None):
         root = store.base_path / "shared-environment"
         site_packages = root / "site-packages"
         site_packages.mkdir(parents=True, exist_ok=True)
@@ -1527,7 +1527,7 @@ async def test_installation_lifecycle_runs_dependency_preparation_concurrently_b
     active_prepares = 0
     max_active_prepares = 0
 
-    async def prepare(store, artifact):
+    async def prepare(store, artifact, *, execution_mode=None):
         nonlocal active_prepares, max_active_prepares
         active_prepares += 1
         max_active_prepares = max(max_active_prepares, active_prepares)
@@ -1938,7 +1938,7 @@ async def test_shared_apply_prepares_dependency_environment_before_worker_launch
     )
     order: list[str] = []
 
-    async def prepare(store, artifact):
+    async def prepare(store, artifact, *, execution_mode=None):
         order.append("prepare")
         root = store.base_path / "test-environment"
         site_packages = root / "site-packages"
@@ -1988,7 +1988,7 @@ async def test_shared_dependency_failure_is_explicit_and_same_revision_can_retry
     )
     launch_count = 0
 
-    async def fail_prepare(store, artifact):
+    async def fail_prepare(store, artifact, *, execution_mode=None):
         raise DependencyEnvironmentPreparationError("dependency download failed")
 
     def schedule(runtime):
@@ -2020,7 +2020,7 @@ async def test_shared_dependency_failure_is_explicit_and_same_revision_can_retry
     assert runtime.launch_task is None
     assert runtime.dependency_environment is None
 
-    async def successful_prepare(store, artifact):
+    async def successful_prepare(store, artifact, *, execution_mode=None):
         root = store.base_path / "retry-environment"
         site_packages = root / "site-packages"
         site_packages.mkdir(parents=True)
@@ -2063,7 +2063,7 @@ async def test_reconcile_reports_dependency_failure_without_worker_launch(
         enabled=False,
     )
 
-    async def fail_prepare(store, artifact):
+    async def fail_prepare(store, artifact, *, execution_mode=None):
         raise DependencyEnvironmentPreparationError("dependency download failed")
 
     monkeypatch.setattr(
@@ -2179,7 +2179,7 @@ async def test_oss_desired_state_prepares_environment_before_worker_launch(
     )
     order: list[str] = []
 
-    async def prepare(store, artifact):
+    async def prepare(store, artifact, *, execution_mode=None):
         order.append("prepare")
         root = store.base_path / "test-environment"
         site_packages = root / "site-packages"

{langbot_plugin-0.7.3 → langbot_plugin-0.7.4}/tests/runtime/plugin/test_worker_launcher.py

@@ -571,6 +571,7 @@ async def test_prepare_dependency_environment_selects_profile_installer(
             *,
             runtime_fingerprint,
             installer,
+            execution_mode=None,
         ):
             captured.update(
                 artifact=artifact,

langbot_plugin-0.7.3/src/langbot_plugin/version.py

@@ -1 +0,0 @@
-__version__ = "0.7.3"