LangBot Plugin Infra
Plugin SDK, CLI, Plugin Runtime and Box sandbox runtime for LangBot.
English / 简体中文
Overview
This repository is the shared infrastructure powering LangBot's plugin and
sandbox subsystems. It is published to PyPI as the single
langbot-plugin package and ships
three things:
- Plugin SDK & CLI (
lbp) — Python APIs, base classes and thelbpcommand for scaffolding, building, debugging and publishing plugins. - Plugin Runtime (
lbp rt) — the host process that discovers, installs and runs plugins, bridging them to LangBot over stdio or WebSocket. - Box Runtime (
lbp box) — the code-sandbox service backing LangBot's Box subsystem, executing untrusted code via Docker / nsjail / E2B backends. An explicit, non-sandboxedhostbackend is available for trusted local development only.
LangBot depends on this package as the pinned langbot-plugin==<x.y.z> in its
pyproject.toml; the canonical version lives in this repo's pyproject.toml.
The Runtime component (
src/langbot_plugin/runtime/) is licensed separately under AGPL; everything else in this repository is Apache 2.0. Seesrc/langbot_plugin/runtime/README.md.
Install
pip install langbot-plugin
# or, recommended
uv tool install langbot-plugin
lbp --help
CLI at a glance
| Command | Purpose |
|---|---|
lbp init <name> |
Scaffold a new plugin project |
lbp comp <Type> |
Generate a component (Command / Tool / EventListener / KnowledgeEngine / Parser / Page) |
lbp run |
Run / remote-debug a plugin against a running LangBot |
lbp build |
Package the plugin into a distributable zip |
lbp publish |
Publish to the LangBot Plugin Market |
lbp login / lbp logout |
Authenticate with your LangBot account |
lbp rt |
Launch a standalone Plugin Runtime (control 5400, debug 5401) |
lbp box |
Launch a standalone Box sandbox runtime (default port 5410) |
lbp ver |
Print the CLI / package version |
Component types
Plugins extend LangBot through six component types, scaffolded with
lbp comp <Type>:
- Command — user-triggered actions (e.g.
!weather tokyo) - Tool — LLM-callable functions for AI agents
- EventListener — handlers for message-pipeline events
- KnowledgeEngine — custom knowledge-base retrieval for RAG
- Parser — custom message / content parsing
- Page — custom web page embedded in the LangBot admin panel
Runner Runtime
The SDK provides Runner component definitions, protocol entities, runtime
dispatch, run-scoped Host API helpers, and low-level daemon relay primitives
used by runner/plugin packages that need an outbound user-side runtime process.
This includes run-scoped pull APIs on RunnerAPIProxy (history, events, state,
run ledger) and steering_pull for absorbing follow-up user input into an
active run when the runner declares capabilities.steering in its manifest.
The SDK does not provide a managed, generic remote Runner product: external
harness execution policy, process launch details, authentication, workspace
selection, and provider-specific behavior belong to the runner/plugin package or
a deployment-owned remote daemon or managed agent platform.
Documentation
- Plugin development tutorial — https://langbot.app/docs/zh/plugin/dev/tutor
- Debugging the Runtime / CLI / SDK — https://langbot.app/docs/zh/develop/plugin-runtime
- Dev environment setup — https://langbot.app/docs/zh/develop/dev-config
License
Apache 2.0, except the Plugin Runtime (src/langbot_plugin/runtime/) which is
AGPL. See LICENSE and the
Runtime README.
1 maintainer
Metadata
1 maintainer
Release files for langbot-plugin 0.7.13
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| langbot_plugin-0.7.13.tar.gz | 713.5 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| langbot_plugin-0.7.13-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 1.2 MB
Release files / langbot_plugin-0.7.13.tar.gz
| Download URL | langbot_plugin-0.7.13.tar.gz |
|---|---|
| Size | 713.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
fc8b1127f1774a50b2e0b63c309643ee7fab78a4d5b5fbd0020de1eb1d921e78
|
|
BLAKE2b-256 checksum How to use checksums |
50499d3b0ba59ccc11216b7780d99587c483c49c22095ce29b1ed0c2b30ba0a7
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.13.1 {"installer":{"name":"uv","version":"0.13.1","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Release files / langbot_plugin-0.7.13-py3-none-any.whl
| Download URL | langbot_plugin-0.7.13-py3-none-any.whl |
|---|---|
| Size | 458.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
f2ef40472907355dd7997bf4e4d5a2dd2bc563f8b3e1e872d3caec6ffea15c81
|
|
BLAKE2b-256 checksum How to use checksums |
54f123b0e7e37af68781b394a35c95e56b7169fae4ac5e9bb9946ded794a7758
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.13.1 {"installer":{"name":"uv","version":"0.13.1","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Security for langbot-plugin 0.7.13
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
