Every crate in the apomesh workspace, grouped by the layer it belongs to.
Each role line is the crate’s own one-sentence self-description (its //!
module doc). A crate with a full reference page is linked; the rest are
named here and documented as the coverage backlog is worked
down.
The layering runs bottom-up: the wire protocol is the leaf nothing depends
backward on, the substrate core and its implementation planes sit above
it, the orchestrator and worker drive sessions, and the transports,
verticals, and UI compose the whole. See
Control & execution planes for the
narrative.
| Crate | Role |
|---|
| apomesh-protocol | The wire protocol — prost-generated protobuf types only. |
| Crate | Role |
|---|
| apomesh-substrate-types | The substrate type vocabulary and port traits — the stable, most-depended-on foundation. |
| apomesh-substrate | The substrate domain library — functions take domain types and return domain types. |
| Crate | Role |
|---|
| apomesh-substrate-catalog | The agent-definition plane — the Fleet-definition machinery (agent catalog, prompt-composition seam, skill registry). |
| apomesh-substrate-llm | The LLM and embedding provider implementation plane — the concrete provider impls behind the ports. |
| apomesh-substrate-mcp | The MCP tool-transport plane — external MCP servers projected behind the substrate Tool port. |
| apomesh-substrate-net | The shared HTTP egress primitive — the webpki-roots reqwest client the impl planes compose. |
| apomesh-substrate-sandbox | The tool-sandbox implementation plane — the per-platform adapters and runner-subprocess machinery. |
| apomesh-substrate-state | The state implementation plane — the in-memory and SQLite StateStore adapters. |
| apomesh-substrate-tools | The leaf-capability tool plane — web, file-ops, git, and shell tools plus the predicate evaluator. |
| Crate | Role |
|---|
| apomesh-worker | The worker — the execution endpoint binary and its library surface. |
| apomesh-tool-runner | The sandboxed tool-dispatch entry point, spawned inside the OS sandbox to run one tool invocation. |
| Crate | Role |
|---|
| apomesh-rest-api | The REST/JSON external API surface — the human-facing parallel to the gRPC wire. |
| apomesh-smartchat | SmartChat — an operator-facing chat layer built on substrate primitives. |
| Crate | Role |
|---|
| apomesh-auth-providers | Configurable SessionAuth and WorkerAuth backends — OAuth 2.0 / OIDC, pre-shared API keys, and mTLS. |
| apomesh-config | The apomesh daemon configuration surface. |
| Crate | Role |
|---|
| apomesh-bump | The workspace version-bump tool. |
| apomesh-reseal | The operator entrypoint for a sealing-key rotation. |
| cassette-refresh | The cassette format and drift-detection engine for recorded LLM provider interactions. |
| Crate | Role |
|---|
| apomesh-control-plane | The desktop operator app — submit, observe, and cancel sessions against an orchestrator’s gRPC service. |
| Crate | Role |
|---|
| apomesh-sample-tail-consumer-prometheus | A reference tail-consumer sample — the substrate event bus projected to Prometheus. |