Skip to main content

xcore-protocol

Canonical cross-service protocol for the XCore ecosystem.

Mission

xcore-protocol is the canonical source of truth for XCore cross-service communication.

It defines:

  • message schemas
  • envelope structure
  • route and stream metadata
  • versioning and compatibility rules
  • canonical fixtures
  • generation inputs and tooling
  • generated Java and Python protocol DTO/model artifacts
  • thin handwritten validation and repository-tooling support around generated artifacts
  • cross-language compatibility tests

Scope

This repository contains only cross-process / cross-service wire protocol artifacts.

In scope

  • event, command, and RPC contracts
  • envelope definitions
  • route metadata
  • shared payload subtypes
  • protocol fixtures and validation helpers
  • generation configuration and generated Java/Python protocol artifacts

Out of scope

  • application business logic
  • Discord handlers or presentation code
  • Mindustry runtime integration
  • Mongo persistence
  • app-specific reconnect/worker orchestration

Repository Layout

  • docs/ — ADRs, architecture notes, policies, migration notes
  • spec/ — protocol specs, shared types, envelopes, routes, generation inputs
  • fixtures/ — valid, invalid, and legacy examples
  • generators/ — language generation config/templates/scripts
  • java/ — generated Java protocol artifacts for the canonical model surface
  • python/ — generated Python protocol package and thin helpers
  • compat/ — cross-language compatibility checks
  • scripts/ — validation and generation helper scripts

Migrated Families

All planned message families are fully migrated and operational:

  • Moderation — ban, mute, vote-kick, kick-banned, pardon, audit
  • Discord — link-confirm, unlink, link-status, link-code
  • Maps — list request/response, remove request/response
  • Security — permission changes, staff role sync and staff password reset RPC
  • Chat/Heartbeat — chat messages, global chat, heartbeat, join/leave, server actions, player state commands
  • Telemetry — Redis TTL snapshot payloads for Prometheus/Gateway telemetry aggregation

Current Status

All canonical message families are defined with JSON Schema specs and canonical fixtures. Generated Java records (org.xcore.protocol.generated.*) and Python frozen dataclasses (xcore_protocol.generated.*) cover the supported generated protocol surface, including route-less telemetry snapshot payloads. XCore-plugin and XCore-discord-bot both consume generated artifacts as their sole transport model where applicable. Cross-language compatibility checks and full CI validation chain are in place.

Releases

Each vX.Y.Z tag publishes the same version of both supported artifacts:

  • Java: org.xcore:xcore-protocol-java:X.Y.Z from https://maven.x-core.org/releases
  • Python: xcore-protocol==X.Y.Z from PyPI

Production consumers must use an exact released version. Git revisions and -SNAPSHOT versions are only acceptable while developing the protocol itself. The release workflow validates schemas, generated output, Java tests, Python tests, and distributable packages before publishing.

Before the first PyPI release, configure the pypi GitHub environment as a PyPI Trusted Publisher for this repository's Publish Release workflow. No Python package registry is self-hosted.

See Also

  • docs/adr/ADR-001-protocol-first.md
  • docs/architecture/protocol-overview.md
  • docs/policies/versioning.md
  • docs/policies/compatibility.md

Metadata

Release files for xcore-protocol 0.16.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for xcore-protocol 0.16.0
File Size Uploaded Provenance Actions
xcore_protocol-0.16.0.tar.gz 58.1 kB With provenance Details for xcore_protocol-0.16.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for xcore-protocol 0.16.0
File Interpreter ABI Platform Actions
xcore_protocol-0.16.0-py3-none-any.whl Python 3 none any Details for xcore_protocol-0.16.0-py3-none-any.whl

Total release size: 141.8 kB

Release files / xcore_protocol-0.16.0.tar.gz

Download URL xcore_protocol-0.16.0.tar.gz
Size 58.1 kB
Tags Source
SHA-256 checksum
How to use checksums
b235cea231b00200733b30a9b62d5ae75efd15d70013a36213264947857825d8
BLAKE2b-256 checksum
How to use checksums
722e83e308d8e8f84340eb478644827cd59b856d60bf31c1b220d3428a8ed886
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.

Transparency log

Release files / xcore_protocol-0.16.0-py3-none-any.whl

Download URL xcore_protocol-0.16.0-py3-none-any.whl
Size 83.7 kB
Tags Python 3
SHA-256 checksum
How to use checksums
498918a8a95722331eeb62ae576ed0add83aebea0d286992bb811ade6c3e6ffd
BLAKE2b-256 checksum
How to use checksums
de868e003c41aeb9c3a33be697851146d1aa5555998d11a615aa715f404ef096
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.

Transparency log

Security for xcore-protocol 0.16.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for xcore_protocol-0.16.0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page