xema.dev

<p align="center"> <svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/agent-tool-inquiry-channel"> <rect width="680" height="120" rx="14" fill="#0B1020"/> <g transform="tra

The one way a Xema service calls a model: resolve the LLM gateway from the service registry, mint a short-lived sealed grant through llm-registry-api, call it, and emit the OpenTelemetry GenAI semantic conventions — once, instead of eleven times.

Longhorn RWX StorageDriver — Kubernetes Persistent Volume Claims with per-pool sub-path mounts (Phase A.3 of xema-os-plan §workspace).

Docker named-volume StorageDriver — pool = one Docker volume; subPath = directory within. Phase A.3 of xema-os-plan §workspace.

Dev-only host-path StorageDriver — pool = host directory, subPath = relative dir. Works under both k8s (hostPath volume) and docker (bind mount). Phase A.3 of xema-os-plan §workspace.

Docker Swarm CSI StorageDriver — pool = one cluster-scoped CSI volume; subPath = directory within. WS6 Part B of xema-os-plan §workspace.

TypeScript client for the LLM Gateway API (usage analytics, audit, pricing endpoints)

<!-- Generated by @xemahq/api-client-generator. Do not edit by hand. --> <p align="center"> <svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/skill-registry-api-client"> <re

<!-- Generated by @xemahq/api-client-generator. Do not edit by hand. --> <p align="center"> <svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/connector-gateway-api-client">

<!-- Generated by @xemahq/api-client-generator. Do not edit by hand. --> <p align="center"> <svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/workspace-storage-pool-internal-a

<!-- Generated by @xemahq/api-client-generator. Do not edit by hand. --> <p align="center"> <svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/connector-gateway-internal-api-cl

<!-- Generated by @xemahq/api-client-generator. Do not edit by hand. --> <p align="center"> <svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/org-database-pool-api-client">

<!-- Generated by @xemahq/api-client-generator. Do not edit by hand. --> <p align="center"> <svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/org-database-pool-internal-api-cl

Xema capability projection framework. CapabilityProjector is the shared reconcile engine every capability producer drives: serialized reconciles, content-aware fingerprint short-circuit, idempotent register-then-prune scoped to the refs a source previousl

Generated public API client for the Xema xema-capability-router service.

Generated internal API client for the Xema capability-registry-api service.

Dev-time build tooling shared by every Xema repository. Ships as plain ESM, depending only on @xemahq/release-policy for registry access, so the published artifact is the reviewed source.

Test-only harness that boots a real PostgreSQL as a plain loopback process, migrates a throwaway schema, and exports DATABASE_URL — so database-backed conformance suites RUN instead of silently skipping. Also ships the repo's one ephemeral-port allocator

Azure Key Vault custody provider for `@xemahq/credential-custody`: a `CustodyBackend` over Key Vault secrets, authenticated only by AKS workload identity.

PostgreSQL driver for the database pool: per-binding scoped schemas and credentials, plus the legacy org-database path.

Generated internal API client for the Xema authorization-api service.

Temporal workers and clients for Xema — connection management, audit-actor interceptors, stated-authority HTTP client, schedules, and search attributes.

Layer-1 managed outbound-fetch / polite-crawl HTTP client. A domain-agnostic wrapper any ingestion/monitor/scraper calls instead of bare `fetch`: per-host token-bucket rate limiting, exponential backoff+jitter with Retry-After, a per-host circuit breaker,

OpenCode RuntimeAdapter: descriptor, pure materialize (SessionRuntimeSpec to opencode config), launcher, state layout and the OpenCode-to-frames driver.

NestJS enforcement point for Xema entitlement. Resolves the installation license offline via @xemahq/license-verifier, gates biome installation and the running edition against it, and projects it onto the platform Edition + feature-flag axis. Fails closed

OpenBao KV-v2 provider for the Xema credential custody contract (@xemahq/credential-custody). Vault-wire-compatible; a thin fetch shim with no vendor SDK. Exports the provider definition the credential broker composes, selected by deployment configuration

<!-- Generated by @xemahq/api-client-generator. Do not edit by hand. --> <p align="center"> <svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/llm-registry-api-client"> <rect

<!-- Generated by @xemahq/api-client-generator. Do not edit by hand. --> <p align="center"> <svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/llm-registry-internal-api-client"

Generated operator API client for the Xema llm-registry-api service.

<!-- Generated by @xemahq/api-client-generator. Do not edit by hand. --> <p align="center"> <svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/managed-llm-economy-api-client">

<!-- Generated by @xemahq/api-client-generator. Do not edit by hand. --> <p align="center"> <svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/managed-llm-economy-internal-api-

<!-- Generated by @xemahq/api-client-generator. Do not edit by hand. --> <p align="center"> <svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/managed-llm-economy-operator-api-

<p align="center"> <svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/blob-storage"> <rect width="680" height="120" rx="14" fill="#0B1020"/> <g transform="translate(28,34)"

Kubernetes CSI ReadWriteMany StorageDriver — one RWX PVC per pool with per-allocation sub-path mounts, for Longhorn, NFS, AWS EFS, GCP Filestore and Azure Files.

Every Xema StorageDriver adapter in one package — Kubernetes CSI (Longhorn, NFS, EFS, Filestore, Azure Files), Docker local, Docker Swarm CSI and host-path — plus the per-backing native-semantics table and the conformance suite a new driver is held to.