Skip to main content

⚡ XCore Framework

XCore Logo

High-performance, plugin-first orchestration framework built on FastAPI.

CI Status Docs Build & Deploy Netlify Status Version License Python Support FastAPI

---

XCore is designed to load, isolate, and manage modular extensions (plugins) in a secure, sandboxed environment. It provides a robust foundation for building scalable applications where features can be dynamically added, removed, or updated without affecting the core system.

✨ Key Features

  • 🔌 Plugin-First Architecture: Everything is a plugin. Keep your core lean and your features modular.
  • ⚡ High-Performance Runtime: Optimized EventBus and Warm Pool for minimal latency (Ephemeral/Serverless mode).
  • 🛡️ Advanced Sandboxing: AST-based scanning, resource restriction, and C++ security core.
  • 🌐 Native Multi-tenancy: Resource isolation (DB/Cache) and tenant-aware routing out of the box.
  • 🚀 Built on FastAPI: Leverage the speed and ecosystem of one of the fastest Python frameworks.
  • 📦 Service Container: Seamless management of Databases (SQLAlchemy), Cache (Redis or tiered Memory+Redis), and Schedulers.
  • 🛠️ Dev-Friendly CLI: Hot-reload plugins, sign manifests, and verify system health with one command.
  • 📊 Production Ready: Structured logging, Prometheus metrics, and comprehensive test coverage.
  • 🔭 Distributed Tracing: Real OpenTelemetry integration — a single trace_id follows a request across HTTP, plugin calls, and sandboxed subprocess IPC hops.

📺 Demo

Integrating XCore into your FastAPI application is straightforward:

from fastapi import FastAPI
from xcore import Xcore
from contextlib import asynccontextmanager

# 1. Initialize the Kernel
xcore = Xcore(config_path="integration.yaml")

@asynccontextmanager
async def lifespan(app: FastAPI):
    # 2. Boot XCore (loads plugins and services)
    await xcore.boot(app)
    yield
    # 3. Graceful shutdown
    await xcore.shutdown()

app = FastAPI(lifespan=lifespan)

@app.get("/compute")
async def compute(value: int):
    # 4. Call a plugin method dynamically
    result = await xcore.plugins.call("math_plugin", "calculate", {"x": value})
    return {"result": result}

🚀 Getting Started

Installation

# Clone the repository
git clone https://github.com/traoreera/xcore.git
cd xcore

# Install using Poetry
make install

Quick Run

Start the development server with auto-reload enabled:

make dev

🏗️ Architecture

XCore follows a "minimal core" philosophy. Most business logic resides in plugins, which are managed by the Plugin Supervisor.

flowchart TB
    subgraph Core["XCore Kernel"]
        X[Orchestrator] --> PS[Plugin Supervisor]
        X --> EB[Event Bus]
        X --> SC[Service Container]
    end

    PS --> Trusted[Trusted Plugins]
    PS --> Sandbox[Sandboxed Plugins]

    SC --> DB[(Database)]
    SC --> RD[(Redis)]
    SC --> SCH[Scheduler]

🛠️ CLI Reference

The xcore CLI is your control center for managing the framework.

Command Description
xcore plugin list List all loaded plugins
xcore plugin reload <name> Hot-reload a plugin without restarting the server
xcore plugin info <name> Inspect plugin manifest and permissions
xcore plugin sign <path> Generate a security signature for a plugin
xcore services status Check the health of DB, Cache, and Scheduler
xcore health Perform a global system health check
xcore worker start Start the background task worker

🧪 Development & Quality

We maintain high standards for code quality and security:

make test              # Run the full test suite
make lint-fix          # Auto-format and fix linting issues
make security-check    # Run Bandit security audit
make benchmark         # Run performance benchmarks

📄 License

This project is licensed under the MIT License. See the LICENSE file for details.


Built with ❤️ by the XCore Team

Metadata

Release files for XCoreRuntime 2.6.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for XCoreRuntime 2.6.0
File Size Uploaded Provenance Actions
xcoreruntime-2.6.0.tar.gz 139.4 kB Without provenance Details for xcoreruntime-2.6.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for XCoreRuntime 2.6.0
File Interpreter ABI Platform Actions
xcoreruntime-2.6.0-py3-none-any.whl Python 3 none any Details for xcoreruntime-2.6.0-py3-none-any.whl

Total release size: 331.8 kB

Release files / xcoreruntime-2.6.0.tar.gz

Download URL xcoreruntime-2.6.0.tar.gz
Size 139.4 kB
Tags Source
SHA-256 checksum
How to use checksums
8451bcebbd1f2ed8234076411e20deb506e7c0392d5b6e77d91daad265fd8bef
BLAKE2b-256 checksum
How to use checksums
6d3d7fd2d222b03f38938d16b18af9710ea9b396c8a890e56830fe5b1d6b2ebb
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.1.0 CPython/3.13.7

Release files / xcoreruntime-2.6.0-py3-none-any.whl

Download URL xcoreruntime-2.6.0-py3-none-any.whl
Size 192.5 kB
Tags Python 3
SHA-256 checksum
How to use checksums
700b778ad79a86679274adc1374777f69c2d0864b3bcb3bc76407699e52c1100
BLAKE2b-256 checksum
How to use checksums
c748008fae5bf12e2aa2f9006027a10a6b5128ec2849092b78f8acb0a3a1aea0
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.1.0 CPython/3.13.7

Security for XCoreRuntime 2.6.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page