The XServer Book

Vol. 1 Getting Started & Mental Model 6 chapters · complete Establishes the three concepts that run through the whole book — generations, leases and reclaim-at-zero — gets your first app running, and teaches you how to read logs and debug.

Vol. 2 Configuration & Assembly 7 chapters · complete Every xs.json field explained, vhosts and SNI, the Custom knob system, the four static-layer knobs, multi-service topologies, certificate management and config rollback semantics.

07xs.json in depth · service-level fieldscomplete

08xs.json in depth · host level and vhostscomplete

09The Custom knob systemcomplete

10The four static-layer knobs and traversal defensecomplete

11Multiple services and topologycomplete

12Certificate managementcomplete

13Config validation and rollbackcomplete

Vol. 3 Protocol Development 12 chapters · complete HTTP's three-way return and response building, routing (map + pattern), JSON / templates / vhosts, the six WebSocket callbacks, TCP streams and UDP, connection takeover.

14HTTP basics: the view structure and three-way returncomplete

15Building responses: headers, chunked and keep-alivecomplete

16Request bodies: fixed-length and chunked readingcomplete

17Routing: static table + dynamic patterns + method maskscomplete

18JSON and xvaluecomplete

19Templates and controlled pagescomplete

20vhosts in practicecomplete

21WebSocket basicscomplete

22WebSocket advancedcomplete

23TCP stream servicescomplete

24UDP servicescomplete

25Connection takeover (TAKEOVER)complete

Vol. 4 Hot Reload Deep Dive 6 chapters · complete The desired-state coordination model, trigger and query APIs, ServiceSwap/xsSwapTake state handover, generation lifecycle, GC and zero leaks, boundaries and anti-patterns.

26The reload model: desired-state coordinationcomplete

27Triggering and queryingcomplete

28State handovercomplete

29The generation lifecyclecomplete

30GC and zero leakscomplete

31Boundaries and anti-patternscomplete

Vol. 5 Extensions, Ops & Projects 17 chapters · complete SQLite / XTP2 / custom extensions, the nested-TCC plugin system, deployment and operational visibility, security boundaries, plus three hands-on projects: a REST API, a TCP gateway and a multi-vhost site farm.

32The SQLite extensioncomplete

33The XTP2 extensioncomplete

34The xllm extension: LLM calls from scriptscomplete

35The xllm-session governance layercomplete

36Mail: the xmail familycomplete

37md4c: Markdown renderingcomplete

38xacme: automated certificatescomplete

39Custom extensionscomplete

40Nested TCC and the plugin systemcomplete

41Timers and background taskscomplete

42Deploymentcomplete

43Operations and observabilitycomplete

44Security boundaries and the trust modelcomplete

45Project 1: a REST API servicecomplete

46Project 2: an XTP2 TCP gatewaycomplete

47Project 3: a multi-vhost site farmcomplete

48Single-file deploymentcomplete

49xwork: agent orchestrationcomplete

50webview and the app nodecomplete

51Finale: tuning and the roadmapcomplete

How to read this book

Every chapter follows the same eight parts: overview → intro → concepts → examples → contract → common mistakes → exercises (three levels + acceptance) → summary cheatsheet. Examples carry a "verified on a real machine" tag: file names are traceable, commands can be copied directly, outputs come from actual runs. Chapter 1 turns this very template into the contract.

Reader	Path
Backend developers	Vol. 1 → Vol. 3 (pick your protocols) → Vol. 4 (hot reload is a must) → Vol. 5 projects
Ops / deployment	Vol. 1 ch. 01–02 → Vol. 2 (config in depth) → Vol. 5 ch. 42–39 (deploy / observability / security)
Contributors / deep divers	Read cover to cover; jump to the xrt book via the "further reading" boxes at chapter ends for xrt fundamentals