LangBot/plugins/misc/SysStatPlugin/SHARED_RUNTIME.md

Shared runtime source candidate (SDK >=0.7.4)

This source declares sharedRuntime: shared-runtime-v1 and componentModel: stateless-v1. It is source-reviewed for the multi-tenant contract; it is not certified and makes no claim of live tenant acceptance.

Worker-scoped readings (not per-tenant)

Every value this command reports describes the shared plugin worker — its process and its host — and is identical for all installations served by that worker:

• process RSS (psutil.Process(os.getpid())),
• host memory (virtual_memory) and host disk (disk_usage('/')),
• host CPU times, usage, logical/physical core count and current frequency.

None of it is tenant data and none of it is read from the calling installation's configuration. It is intentionally exposed as worker/host status; treat it as operational metadata for whoever can invoke the command, not as isolation between tenants.

Non-blocking collection

• psutil.cpu_percent(interval=None) is used: it returns immediately with the delta since the previous call instead of sleeping for a one-second sample window.
• The whole collection is offloaded with await asyncio.to_thread(_collect_status), so disk or procfs syscalls cannot stall overlapping invocations from other tenants.

Per-invocation vs process state

• The command component is stateless: it reads no config and stores nothing on self.
• There is no binding-keyed cache, so on_installation_revoked needs no work here.

Known limits

• Values are host-wide and shared across installations on the same worker; a tenant that is not permitted to see host statistics must not be granted this command.
• The first cpu_percent(interval=None) after a worker restart can report 0.00% until a second sample establishes the delta.
• No claim of certification; independent review and two-Workspace invocation acceptance are still required.