langbot-plugin 0.7.5__tar.gz → 0.7.6__tar.gz

{langbot_plugin-0.7.5 → langbot_plugin-0.7.6}/ARCHITECTURE.md

@@ -222,7 +222,7 @@ may select indexes or trusted hosts.
 
 The dependency admission path has one bounded historical ABI exception: nine
 explicit `langbot-team` archive identities with exact raw SHA-256 digests and
-`langbot-plugin==0.6.1` may use the Runtime-owned SDK **0.7.5** in `dedicated`
+`langbot-plugin==0.6.1` may use the Runtime-owned SDK **0.7.6** in `dedicated`
 mode only. Artifact bytes are verified before extraction; a changed archive,
 identity, requirement, Runtime version, or shared execution mode fails normal
 SDK pin validation. This does not issue a certificate or change Core placement

{langbot_plugin-0.7.5 → langbot_plugin-0.7.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: langbot-plugin
-Version: 0.7.5
+Version: 0.7.6
 Summary: This package contains the SDK, CLI for building plugins for LangBot, plus the runtime for hosting LangBot plugins
 Project-URL: Homepage, https://langbot.app
 Project-URL: Repository, https://github.com/langbot-app/langbot-plugin-sdk

{langbot_plugin-0.7.5 → langbot_plugin-0.7.6}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "langbot-plugin"
-version = "0.7.5"
+version = "0.7.6"
 description = "This package contains the SDK, CLI for building plugins for LangBot, plus the runtime for hosting LangBot plugins"
 readme = "README.md"
 authors = [

{langbot_plugin-0.7.5 → langbot_plugin-0.7.6}/src/langbot_plugin/cli/__init__.py

@@ -86,6 +86,12 @@ def main():
         help="Comma-separated trusted hosts for plugin dependency installation",
         default="",
     )
+    run_parser.add_argument(
+        "--tag",
+        type=str,
+        help="Process label shown by ps/htop (for example author/plugin_name); cosmetic only",
+        default="",
+    )
 
     # login command
     login_parser = subparsers.add_parser("login", help="Login to LangBot account")
@@ -191,6 +197,7 @@ def main():
                 args.plugin_debug_key,
                 args.pypi_index_url,
                 args.pypi_trusted_host,
+                tag=args.tag,
             )
         case "build":
             build_plugin_process(args.output)

{langbot_plugin-0.7.5 → langbot_plugin-0.7.6}/src/langbot_plugin/cli/commands/runplugin.py

@@ -2,6 +2,7 @@ from __future__ import annotations
 
 import asyncio
 import dotenv
+import logging
 import os
 
 from langbot_plugin.utils.discover.engine import ComponentDiscoveryEngine
@@ -18,10 +19,32 @@ from langbot_plugin.runtime.bounded_executor import (
 )
 
 
+logger = logging.getLogger(__name__)
+
+
 def should_load_artifact_dotenv(runtime_profile: str) -> bool:
     return runtime_profile != "shared"
 
 
+def apply_process_label(tag: str) -> None:
+    """Record the process label carried by the worker command line.
+
+    The launcher passes ``--tag author/name`` so an operator can tell which
+    plugin a worker belongs to from ps/htop; this helper keeps the same value in
+    the worker log. It makes no syscalls and changes no process attribute, so it
+    behaves identically on every platform.
+
+    The label is cosmetic only: it is never an identity, an authorization input
+    or a routing key. The Runtime owns the real installation identity, and this
+    value may be forged by whoever starts the process.
+    """
+
+    label = "".join(ch for ch in str(tag or "") if ch.isprintable()).strip()
+    if not label:
+        return
+    logger.info("Plugin worker process label: %s", label)
+
+
 async def arun_plugin_process(
     stdio: bool = False,
     prod_mode: bool = False,
@@ -93,8 +116,10 @@ def run_plugin_process(
     plugin_debug_key: str = "",
     pypi_index_url: str = "",
     pypi_trusted_host: str = "",
+    tag: str = "",
 ) -> None:
     configure_process_logging()
+    apply_process_label(tag)
 
     try:
         asyncio.run(

{langbot_plugin-0.7.5 → langbot_plugin-0.7.6}/src/langbot_plugin/runtime/plugin/dependency_environment.py

@@ -34,7 +34,7 @@ _RUNTIME_SDK_COMPATIBILITY_SERIES = (0, 6)
 # dependency ABI admission only; it never grants certification or shared slots.
 # Releases that reviewed the nine digest-pinned legacy archives below. A new
 # Runtime release re-verifies dedicated behavior before extending this set.
-_LEGACY_DEDICATED_SDK_RUNTIME_VERSIONS = frozenset({"0.7.4", "0.7.5"})
+_LEGACY_DEDICATED_SDK_RUNTIME_VERSIONS = frozenset({"0.7.4", "0.7.5", "0.7.6"})
 
 _LEGACY_DEDICATED_SDK_061 = {
     (

{langbot_plugin-0.7.5 → langbot_plugin-0.7.6}/src/langbot_plugin/runtime/plugin/worker_launcher.py

@@ -258,8 +258,11 @@ class PluginWorkerLauncher:
             "-m",
             "langbot_plugin.cli.__init__",
             "run",
-            "--prod",
         ]
+        process_tag = self._worker_process_tag(launch_spec)
+        if process_tag:
+            worker_args.extend(["--tag", process_tag])
+        worker_args.append("--prod")
         if self.platform == "win32":
             runtime_ws_url = str(launch_spec.runtime_ws_url or "").strip()
             if not runtime_ws_url:
@@ -518,6 +521,17 @@ class PluginWorkerLauncher:
         )
         return args
 
+    @staticmethod
+    def _worker_process_tag(launch_spec: PluginWorkerLaunchSpec) -> str:
+        """Return the cosmetic `author/name` label for the worker command line."""
+
+        artifact = launch_spec.artifact
+        author = str(getattr(artifact, "plugin_author", "") or "").strip()
+        name = str(getattr(artifact, "plugin_name", "") or "").strip()
+        if author and name:
+            return f"{author}/{name}"
+        return name or author
+
     def build_nsjail_args(self, launch_spec: PluginWorkerLaunchSpec) -> list[str]:
         policy, profile = self._require_configuration()
         if profile != "shared" or not self.nsjail_path:
@@ -594,6 +608,7 @@ class PluginWorkerLauncher:
         )
 
         self._append_policy_limits(args, policy)
+        process_tag = self._worker_process_tag(launch_spec)
         args.extend(
             [
                 "--really_quiet",
@@ -603,6 +618,7 @@ class PluginWorkerLauncher:
                 "langbot_plugin.cli.__init__",
                 "run",
                 "-s",
+                *(["--tag", process_tag] if process_tag else []),
                 "--prod",
             ]
         )

langbot_plugin-0.7.6/src/langbot_plugin/version.py

@@ -0,0 +1 @@
+__version__ = "0.7.6"

{langbot_plugin-0.7.5 → langbot_plugin-0.7.6}/tests/cli/test_runplugin.py

@@ -1,6 +1,8 @@
 from __future__ import annotations
 
 import asyncio
+import logging
+import sys
 
 import pytest
 
@@ -288,3 +290,33 @@ def test_run_plugin_process_reports_keyboard_interrupt(monkeypatch):
     runplugin.run_plugin_process()
 
     assert prints == [("keyboard_interrupt",)]
+
+
+def test_apply_process_label_sanitizes_and_logs_the_tag(caplog):
+    with caplog.at_level(logging.INFO, logger=runplugin.__name__):
+        runplugin.apply_process_label("langbot-team/LangRAG")
+        runplugin.apply_process_label("   ")
+        runplugin.apply_process_label("bad\nname\x00")
+
+    messages = [record.getMessage() for record in caplog.records]
+
+    assert "Plugin worker process label: langbot-team/LangRAG" in messages
+    assert "Plugin worker process label: badname" in messages
+    # A blank label records nothing.
+    assert len(messages) == 2
+
+
+def test_cli_run_forwards_the_process_tag(monkeypatch):
+    from langbot_plugin import cli as cli_module
+
+    forwarded: list = []
+    monkeypatch.setattr(
+        cli_module,
+        "run_plugin_process",
+        lambda *args, **kwargs: forwarded.append(kwargs),
+    )
+    monkeypatch.setattr(sys, "argv", ["lbp", "run", "--tag", "langbot-team/LangRAG"])
+
+    cli_module.main()
+
+    assert forwarded and forwarded[0].get("tag") == "langbot-team/LangRAG"

{langbot_plugin-0.7.5 → langbot_plugin-0.7.6}/tests/packaging/test_release_metadata.py

@@ -11,5 +11,5 @@ def test_stable_release_metadata_is_consistent() -> None:
         (root / "src/langbot_plugin/version.py").read_text(encoding="utf-8").strip()
     )
 
-    assert project["project"]["version"] == "0.7.5"
-    assert source_version == '__version__ = "0.7.5"'
+    assert project["project"]["version"] == "0.7.6"
+    assert source_version == '__version__ = "0.7.6"'

{langbot_plugin-0.7.5 → langbot_plugin-0.7.6}/tests/runtime/plugin/test_exact_legacy_sdk_compat.py

@@ -81,6 +81,10 @@ def test_runtime_version_and_downloaded_archive_are_exact(tmp_path, monkeypatch)
         artifact, execution_mode="dedicated"
     )[0] == ("pydantic>=2.0.0", "httpx>=0.28.1")
     monkeypatch.setattr(importlib.metadata, "version", lambda name: "0.7.6")
+    assert PluginDependencyEnvironmentStore._read_requirements(
+        artifact, execution_mode="dedicated"
+    )[0] == ("pydantic>=2.0.0", "httpx>=0.28.1")
+    monkeypatch.setattr(importlib.metadata, "version", lambda name: "0.7.7")
     with pytest.raises(DependencyEnvironmentPreparationError, match="Runtime provides"):
         PluginDependencyEnvironmentStore._read_requirements(
             artifact, execution_mode="dedicated"

{langbot_plugin-0.7.5 → langbot_plugin-0.7.6}/tests/runtime/plugin/test_worker_launcher.py

@@ -988,3 +988,42 @@ def test_shared_pool_worker_mounts_a_writable_tmp(tmp_path):
     # nsjail options must precede the command separator, otherwise they land in
     # the worker argv instead of the sandbox configuration.
     assert tmpfs_index < args.index("--")
+
+
+def test_shared_pool_worker_carries_the_plugin_process_tag(tmp_path):
+    """ps/htop must show which plugin a sandboxed worker belongs to."""
+
+    launcher = PluginWorkerLauncher(
+        nsjail_path="/usr/bin/nsjail",
+        cgroup_v2_available=True,
+        platform="linux",
+    )
+    launcher.configure(_policy(), "shared")
+
+    args = launcher.build_shared_pool_nsjail_args(_launch_spec(tmp_path))
+
+    tag_index = args.index("--tag")
+    assert args[tag_index + 1] == "tester/demo"
+    # The worker command ends with the production flag.
+    assert args.index("--prod") == tag_index + 2
+
+
+def test_oss_worker_carries_the_plugin_process_tag(tmp_path):
+    launcher = PluginWorkerLauncher(
+        nsjail_path="",
+        cgroup_v2_available=False,
+        platform="darwin",
+    )
+    launcher.configure(_policy(require_hard_limits=False), "oss_dev")
+
+    controller = launcher.create_controller(_launch_spec(tmp_path))
+
+    assert controller.args == [
+        "-m",
+        "langbot_plugin.cli.__init__",
+        "run",
+        "--tag",
+        "tester/demo",
+        "-s",
+        "--prod",
+    ]

langbot_plugin-0.7.5/src/langbot_plugin/version.py

@@ -1 +0,0 @@
-__version__ = "0.7.5"