LangBot Plugin Infra
Plugin SDK, CLI, Plugin Runtime and Box sandbox runtime for LangBot.
English / 简体中文
Overview
This repository is the shared infrastructure powering LangBot's plugin and
sandbox subsystems. It is published to PyPI as the single
langbot-plugin package and ships
three things:
- Plugin SDK & CLI (
lbp) — Python APIs, base classes and thelbpcommand for scaffolding, building, debugging and publishing plugins. - Plugin Runtime (
lbp rt) — the host process that discovers, installs and runs plugins, bridging them to LangBot over stdio or WebSocket. - Box Runtime (
lbp box) — the code-sandbox service backing LangBot's Box subsystem, executing untrusted code via Docker / nsjail / E2B backends. An explicit, non-sandboxedhostbackend is available for trusted local development only.
LangBot depends on this package as the pinned langbot-plugin==<x.y.z> in its
pyproject.toml; the canonical version lives in this repo's pyproject.toml.
The Runtime component (
src/langbot_plugin/runtime/) is licensed separately under AGPL; everything else in this repository is Apache 2.0. Seesrc/langbot_plugin/runtime/README.md.
Install
pip install langbot-plugin
# or, recommended
uv tool install langbot-plugin
lbp --help
CLI at a glance
| Command | Purpose |
|---|---|
lbp init <name> |
Scaffold a new plugin project |
lbp comp <Type> |
Generate a component (Command / Tool / EventListener / KnowledgeEngine / Parser / Page) |
lbp run |
Run / remote-debug a plugin against a running LangBot |
lbp build |
Package the plugin into a distributable zip |
lbp publish |
Publish to the LangBot Plugin Market |
lbp login / lbp logout |
Authenticate with your LangBot account |
lbp rt |
Launch a standalone Plugin Runtime (control 5400, debug 5401) |
lbp box |
Launch a standalone Box sandbox runtime (default port 5410) |
lbp ver |
Print the CLI / package version |
Component types
Plugins extend LangBot through six component types, scaffolded with
lbp comp <Type>:
- Command — user-triggered actions (e.g.
!weather tokyo) - Tool — LLM-callable functions for AI agents
- EventListener — handlers for message-pipeline events
- KnowledgeEngine — custom knowledge-base retrieval for RAG
- Parser — custom message / content parsing
- Page — custom web page embedded in the LangBot admin panel
Runner Runtime
The SDK provides Runner component definitions, protocol entities, runtime
dispatch, run-scoped Host API helpers, and low-level daemon relay primitives
used by runner/plugin packages that need an outbound user-side runtime process.
This includes run-scoped pull APIs on RunnerAPIProxy (history, events, state,
run ledger) and steering_pull for absorbing follow-up user input into an
active run when the runner declares capabilities.steering in its manifest.
The SDK does not provide a managed, generic remote Runner product: external
harness execution policy, process launch details, authentication, workspace
selection, and provider-specific behavior belong to the runner/plugin package or
a deployment-owned remote daemon or managed agent platform.
Documentation
- Plugin development tutorial — https://langbot.app/docs/zh/plugin/dev/tutor
- Debugging the Runtime / CLI / SDK — https://langbot.app/docs/zh/develop/plugin-runtime
- Dev environment setup — https://langbot.app/docs/zh/develop/dev-config
License
Apache 2.0, except the Plugin Runtime (src/langbot_plugin/runtime/) which is
AGPL. See LICENSE and the
Runtime README.
1 maintainer
Metadata
1 maintainer
Release files for langbot-plugin 0.7.15
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| langbot_plugin-0.7.15.tar.gz | 719.0 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| langbot_plugin-0.7.15-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 1.2 MB
Release files / langbot_plugin-0.7.15.tar.gz
| Download URL | langbot_plugin-0.7.15.tar.gz |
|---|---|
| Size | 719.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
e5cc9572b8f95b27ece52c857304ec029f477b4860adb4174ca92e034f2c2d70
|
|
BLAKE2b-256 checksum How to use checksums |
d75c6f8ff33347624020b2626b53edc8a6602259bb0428e2ffdd457a2c4a118d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.13.3 {"installer":{"name":"uv","version":"0.13.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"26.04","id":"resolute","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Release files / langbot_plugin-0.7.15-py3-none-any.whl
| Download URL | langbot_plugin-0.7.15-py3-none-any.whl |
|---|---|
| Size | 459.1 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
5e3fb124fe3c2d48e3d6f38bac87b6772c00c736f8072a4773fca27e7590fdee
|
|
BLAKE2b-256 checksum How to use checksums |
0792fffc67154a6d81540fce92710f23ac02e00e385805ce1b89df2d689ec782
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.13.3 {"installer":{"name":"uv","version":"0.13.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"26.04","id":"resolute","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Security for langbot-plugin 0.7.15
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
