LangBot/plugins/misc/AIImagePlugin/SHARED_RUNTIME.md

Shared runtime source candidate (SDK >=0.7.4)

This source declares sharedRuntime: shared-runtime-v1 and componentModel: stateless-v1. It is source-reviewed for the multi-tenant contract; it is not certified and makes no claim of live tenant acceptance.

What is per invocation

• openai_api_key, api_base_url, model_name, and image_size are read from self.get_plugin_config() inside the !draw invocation. Nothing from tenant config is copied onto the plugin object or the Draw component.
• AIImagePlugin.create_client() builds a fresh AsyncOpenAI from that invocation's openai_api_key and api_base_url. The SDK client is a thin httpx wrapper and is cheap to construct; the command closes it in a finally so no connection pool outlives the invocation.
• initialize() is not overridden and no client is cached on the plugin: a shared worker attaches it once with an empty config, so a cached client would carry one installation's API key and base URL into every other installation's !draw.

Binding-keyed state

• None. No process-local tenant cache, no Host storage rows, and no detached tasks exist, so on_installation_revoked() keeps the BasePlugin no-op.

Known limits

• One !draw performs one async image request; a slow or failing provider fails only that command and the client is still closed.
• The API key is a Host-stored configuration string. Restrict access to plugin configuration.
• The openai package is not installed in the local test environment, so the test replaces sys.modules["openai"] with a recorder and drives two installation bindings through one plugin/component object. These are not live provider tests.
• Not certified; independent review, signer approval, and two-Workspace invocation acceptance are still required.