Skip to main content

⚡ XCore Framework

XCore Logo

High-performance, plugin-first orchestration framework built on FastAPI.

CI Status Docs Build & Deploy Netlify Status Version License Python Support FastAPI

---

XCore is designed to load, isolate, and manage modular extensions (plugins) in a secure, sandboxed environment. It provides a robust foundation for building scalable applications where features can be dynamically added, removed, or updated without affecting the core system.

✨ Key Features

  • 🔌 Plugin-First Architecture: Everything is a plugin. Keep your core lean and your features modular.
  • ⚡ High-Performance Runtime: Optimized EventBus and Warm Pool for minimal latency (Ephemeral/Serverless mode).
  • 🛡️ Advanced Sandboxing: AST-based scanning, resource restriction, and C++ security core.
  • 🌐 Native Multi-tenancy: Resource isolation (DB/Cache) and tenant-aware routing out of the box.
  • 🚀 Built on FastAPI: Leverage the speed and ecosystem of one of the fastest Python frameworks.
  • 📦 Service Container: Seamless management of Databases (SQLAlchemy), Cache (Redis or tiered Memory+Redis), and Schedulers.
  • 🛠️ Dev-Friendly CLI: Hot-reload plugins, sign manifests, and verify system health with one command.
  • 📊 Production Ready: Structured logging, Prometheus metrics, and comprehensive test coverage.
  • 🔭 Distributed Tracing: Real OpenTelemetry integration — a single trace_id follows a request across HTTP, plugin calls, and sandboxed subprocess IPC hops.

📺 Demo

Integrating XCore into your FastAPI application is straightforward:

from fastapi import FastAPI
from xcore import Xcore
from contextlib import asynccontextmanager

# 1. Initialize the Kernel
xcore = Xcore(config_path="integration.yaml")

@asynccontextmanager
async def lifespan(app: FastAPI):
    # 2. Boot XCore (loads plugins and services)
    await xcore.boot(app)
    yield
    # 3. Graceful shutdown
    await xcore.shutdown()

app = FastAPI(lifespan=lifespan)

@app.get("/compute")
async def compute(value: int):
    # 4. Call a plugin method dynamically
    result = await xcore.plugins.call("math_plugin", "calculate", {"x": value})
    return {"result": result}

🚀 Getting Started

Installation

# Clone the repository
git clone https://github.com/traoreera/xcore.git
cd xcore

# Install using Poetry
make install

Quick Run

Start the development server with auto-reload enabled:

make dev

🏗️ Architecture

XCore follows a "minimal core" philosophy. Most business logic resides in plugins, which are managed by the Plugin Supervisor.

flowchart TB
    subgraph Core["XCore Kernel"]
        X[Orchestrator] --> PS[Plugin Supervisor]
        X --> EB[Event Bus]
        X --> SC[Service Container]
    end

    PS --> Trusted[Trusted Plugins]
    PS --> Sandbox[Sandboxed Plugins]

    SC --> DB[(Database)]
    SC --> RD[(Redis)]
    SC --> SCH[Scheduler]

🛠️ CLI Reference

The xcore CLI is your control center for managing the framework.

Command Description
xcore plugin list List all loaded plugins
xcore plugin reload <name> Hot-reload a plugin without restarting the server
xcore plugin info <name> Inspect plugin manifest and permissions
xcore plugin sign <path> Generate a security signature for a plugin
xcore services status Check the health of DB, Cache, and Scheduler
xcore health Perform a global system health check
xcore worker start Start the background task worker

🧪 Development & Quality

We maintain high standards for code quality and security:

make test              # Run the full test suite
make lint-fix          # Auto-format and fix linting issues
make security-check    # Run Bandit security audit
make benchmark         # Run performance benchmarks

📄 License

This project is licensed under the MIT License. See the LICENSE file for details.


Built with ❤️ by the XCore Team

Metadata

Release files for XCoreRuntime 2.7.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for XCoreRuntime 2.7.0
File Size Uploaded Provenance Actions
xcoreruntime-2.7.0.tar.gz 153.2 kB Without provenance Details for xcoreruntime-2.7.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for XCoreRuntime 2.7.0
File Interpreter ABI Platform Actions
xcoreruntime-2.7.0-py3-none-any.whl Python 3 none any Details for xcoreruntime-2.7.0-py3-none-any.whl

Total release size: 359.0 kB

Release files / xcoreruntime-2.7.0.tar.gz

Download URL xcoreruntime-2.7.0.tar.gz
Size 153.2 kB
Tags Source
SHA-256 checksum
How to use checksums
f15315b61601dc1c4803e5faa78502c196ba9a52b92f067e360335dad982b16e
BLAKE2b-256 checksum
How to use checksums
bc33c252fdca6b560277e4a4466f3f9d8d1e9bd23dac1d54c92e9469de0e119b
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.1.0 CPython/3.13.7

Release files / xcoreruntime-2.7.0-py3-none-any.whl

Download URL xcoreruntime-2.7.0-py3-none-any.whl
Size 205.9 kB
Tags Python 3
SHA-256 checksum
How to use checksums
06357a458c66f99a5886c332f09a1ec37108b0f6926c6d204ec3a3b85e33c21a
BLAKE2b-256 checksum
How to use checksums
08e964c5cf5ffd5de081c30eee7334a368e76e2fc041902d3c95573966658683
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.1.0 CPython/3.13.7

Security for XCoreRuntime 2.7.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page