xonovex-workflow

Xonovex Platform Monorepo

Monorepo for Xonovex AI agent tools, workflows, and skills

AI coding agents handle prompts, tools, and code changes. What they don't manage is the environment around them: sandbox isolation, model provider routing, terminal sessions, reproducible toolchains, and orchestration at scale.

Xonovex fills this gap. It currently supports Claude Code and OpenCode as agents, with sandboxing via bubblewrap and Docker, VM-level isolation via gVisor and Kata Containers, confidential computing via Confidential Containers (CoCo) with AMD SEV-SNP and Intel TDX, model routing through providers like Gemini, GLM, and GPT, workspace management with Git and Jujutsu, reproducible toolchains via Nix, and Kubernetes orchestration for running agents at scale.

The included skills are token-efficient, harness-neutral, and based on current research and best practices (Agent Skills spec, agentskills.io, agents.md).

• agent-cli-go configures sandboxes, providers, and terminal sessions, then launches the agent
• agent-operator-go orchestrates agents as Kubernetes Jobs with managed workspaces, provider secrets, shared multi-agent workspaces, namespace-level policy enforcement, network isolation, and Nix toolchain provisioning
• moon-nix-toolchain wraps every Moon task in the repository's Nix flake dev shell, giving reproducible flake-pinned toolchains in local runs, pre-commit hooks, and CI
• Skills give agents coding guidelines they follow automatically; plan-driven development with worktrees, project-instruction management, insight extraction, and skill authoring all live here as consolidated skill packages

Quick Start

Agent CLI

npm install -g @xonovex/agent-cli-go
agent-cli run --agent claude --isolation bwrap --provider gemini

The sandbox is selected by three orthogonal axes — --isolation {none,bwrap,docker} × --provision {none,nix,command} × --network {host,none,proxy} — see packages/agent/AGENTS.md.

Agent Kubernetes Operator

# Install CRDs and deploy the operator
kubectl apply -k https://github.com/xonovex/platform//packages/agent/agent-operator-go/config/crd
kubectl apply -k https://github.com/xonovex/platform//packages/agent/agent-operator-go/config/default

# Create a provider and run an agent
kubectl create secret generic gemini-credentials --from-literal=api-key='your-key'
kubectl apply -f - <<EOF
apiVersion: agent.xonovex.com/v1alpha1
kind: AgentProvider
metadata:
  name: gemini-provider
spec:
  displayName: Google Gemini
  authTokenSecretRef:
    name: gemini-credentials
    key: api-key
---
apiVersion: agent.xonovex.com/v1alpha1
kind: AgentRun
metadata:
  name: review-code
spec:
  harness:
    type: claude
  providerRef: gemini-provider
  workspace:
    type: git
    repository:
      url: https://github.com/org/repo.git
      branch: main
  prompt: "Review the codebase and suggest improvements"
EOF

Agent Plugins

Each skill is a separate plugin. Skills are applied automatically when the agent detects a relevant task — no explicit slash-command invocation needed. Skills also work cross-harness (Claude Code, OpenCode, etc.) since they follow the Agent Skills spec.

Claude Code

# Add the Xonovex plugin marketplace
claude plugin marketplace add xonovex/platform