Kernel

asteby/metacore-kernel is the Go runtime that powers every Metacore host. It's a library, not a service: you embed it in your binary, mount its routes, and you have a complete addon runtime.

What it does

Subsystem	Responsibility
Dynamic store	Generic CRUD over any table declared in any installed addon's manifest. List / get / create / update / delete with pagination, sort, filter, tenancy.
Security enforcer	Capability-level gating. Every request is checked against the addon's capabilities[]. Shadow + enforce modes.
Permission service	User-level gating. Resolves the caller's effective permissions and enforces them per route.
Installer	Transactional install / upgrade / uninstall. Manifest diff → DDL plan → migration → hook → metadata update.
WASM sandbox	Executes addon code in wazero. Capability-scoped ABI; no host memory or filesystem access.
WebSocket hub	Real-time fanout, tenant- and channel-scoped. Used by the SDK for live CRUD updates.
Audit pipe	Structured stream of capability checks, permission checks, CRUD ops. Routed to a host-provided sink.
Host helpers	host.App / host.Host wrap config, DI, routing, graceful shutdown for a typical host backend.

Stack

• Go 1.22+
• wazero for the WASM sandbox
• database/sql with dialect-aware DDL generation (Postgres, SQLite)
• OpenTelemetry for traces, metrics, logs
• Zero external services at runtime — no Redis, no message broker; the kernel ships its own primitives

Embedding in 30 seconds

import (
    "github.com/asteby/metacore-kernel/host"
    "github.com/asteby/metacore-kernel/kernel"
)

app, _ := host.NewApp(host.Config{
    DatabaseURL: "postgres://...",
    BundleDir:   "./bundles",
    Listen:      ":8080",
})
app.Mount("/api", kernel.Router(app.Kernel))
app.Run()

That's a complete addon-hosting backend. See Embed the runtime for the full walkthrough.

Where the deep documentation lives

The kernel ships its own VitePress docs site with:

• The full embedding API
• Every config option
• Each subsystem internal (store, enforcer, permission service, installer, sandbox, hub)
• The security model
• The audit format
• Migration & upgrade internals

Kernel docs ↗

Repository

• GitHub: github.com/asteby/metacore-kernel
• License: Apache-2.0
• Releases: Tag-based; binaries via GoReleaser; module index updates pkg.go.dev automatically

Related

• Architecture — where the kernel fits.
• SDK — the client side of the kernel's API.
• Embed the runtime — quickstart.