Skip to main content

konstruktor

Create and manage Arkitekt deployments — the konstruktor CLI in a wheel, and a Python interface to it.

pip install konstruktor

The wheel carries the CLI itself, so that is the whole install: konstruktor is on your PATH (and python -m konstruktor runs it), and the Python interface below always drives the generator it was released with. Docker has to be running.

Everything that decides what a deployment looks like lives in the CLI. This package runs it, reads back what it wrote, and hands you the result as a dokker deployment to look into.

A deployment from Python

from konstruktor import testing_hub

with testing_hub(services=["rekuest", "mikro"], mandate_keys=2) as hub:
    hub.up()                        # written, then started
    hub.wait_ready()                # until everything a client opens answers

    hub.fakts_url                   # http://localhost:<port> — where an app is pointed
    hub.mandate_key("my-app")      # what the app trades for a client, with no browser
    hub.services["mikro"].url       # http://localhost:<port>/mikro
# gone: containers, data and folder

A hub is a self-contained hub: the services you name, and a coordination server of their own, behind one gateway on one port (konstruktor hub create --server local). Nobody has to accept it and nothing leaves the machine.

Entering the block does nothing. The block says what happens, and leaving it undoes exactly that:

made by on leaving the block
a hub for a test testing_hub(...) destroyed, with its data and its folder
a hub you keep local_hub("./hub", ...) stopped; its folder and data stay
a hub that exists Hub.load("./hub") left as it is

A hub can also be made from images instead of names. Each image is asked which service it is, so a client library only has to know the image that hosts it:

testing_hub(service_images=["jhnnsrs/mikro:7"])

Rekuest then runs only if one of the images is Rekuest's.

Looking into it

Inside the block the hub answers for its services:

hub.ps()                                        # its containers, and whether they run
hub.logs("mikro", tail=50).stdout
hub.exec("mikro", "python manage.py check")     # in the running container
hub.run("mikro", "python manage.py shell -c ...")  # in a container of its own
hub.restart("mikro")                            # and wait until it is healthy again
hub.check_health()                              # every service, on its own health address
hub.job("mikro", "plan")                        # a job the image declares

with hub.create_watcher("mikro") as logs:       # what a service writes while you act
    ...
logs.collected_logs

Starting, stopping and removing (up, stop, down, pull, destroy) are the konstruktor commands of the same name, on the whole hub: which containers a hub runs, and from which builds, is the generator's to say, so up(services=[...]) is refused. Everything else above is dokker's, on the compose project in the hub's folder. Each has an a-prefixed async twin (await hub.aup(), async with hub:).

These run on a loop the block owns, so they need the block. Outside of a with — in a fixture, a notebook — hub.enter() and hub.exit() are the two halves of it. How to get in (fakts_url, mandate_key, services, ...) is read from the hub's folder and works anywhere.

Developing a service against a hub

from konstruktor import local_hub

with local_hub("./hub", services=["mikro"], mounts={"mikro": "~/Code/mikro-server"}, debug=["mikro"]) as hub:
    hub.up()
    hub.wait_ready()
    input("running — enter to stop")

The tree is mounted over the image's own code and the server reloads when a file in it changes. The folder is written the first time and used as it is from then on.

Connecting an app

Connecting an app to it takes the address and a mandate key:

from arkitekt import App, connect

app = App("my-app", "0.1.0", services=[...])
with connect(app, url=hub.fakts_url, mandate_key=hub.mandate_key("my-app")) as runtime:
    ...

or, for an app in another process, hub.env("my-app") — FAKTS_URL and FAKTS_MANDATE_KEY. An app in a container on the hub's own docker network points at http://gateway instead: the hub can be logged into at any address it answers on.

One mandate key serves one app. The coordination server pins a token to the first app that logs in with it, so mandate_keys= is how many apps can connect, and hub.mandate_key(name) hands each name its own.

To run a particular build of a service rather than the one a new hub gets, pin it by its name in the stack: testing_hub(..., images={"rekuest": "jhnnsrs/rekuest:1.2.3"}).

With pytest

Installing the package registers a pytest plugin:

import pytest


@pytest.fixture(scope="session")
def hub(konstruktor_hub):
    return konstruktor_hub(services=["rekuest", "mikro"], mandate_keys=2)


@pytest.mark.konstruktor
def test_my_app(hub):
    ...
  • konstruktor_hub is a session-scoped factory taking what testing_hub takes. The hub it returns is entered, started and answering, so a test can ask it anything above. Every hub it makes is destroyed — containers, volumes and folder — when the session ends.
  • Tests marked konstruktor are skipped where Docker is not running.
  • A failed test gets the hub's container logs attached to its report.
  • Hubs live in a registry of their own, so they never show up beside your real ones.
  • A session that is killed leaves containers behind; the next test hub made on the machine removes them.

Which build of a service a run tests against is usually the job's to say, not the suite's. Set KONSTRUKTOR_IMAGES where the suite runs and every hub created there uses those images, for the services it has:

KONSTRUKTOR_IMAGES=rekuest=jhnnsrs/rekuest:1.2.3,mikro=jhnnsrs/mikro:6.1.0 pytest -m konstruktor
option
--konstruktor-keep leave the hubs running after the session, and print where they are
--konstruktor-timeout seconds a hub gets to answer after it is started (600)
--konstruktor-bin the executable to use, instead of $KONSTRUKTOR_BIN or the one in the wheel

From a source checkout

cargo build -p konstruktor-cli
KONSTRUKTOR_BIN=$PWD/target/debug/konstruktor PYTHONPATH=$PWD/python python -m pytest python/tests

Metadata

Release files for konstruktor 0.31.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Built distributions (wheels)

Table of built distributions (wheels) for konstruktor 0.31.1
File
konstruktor-0.31.1-py3-none-win_amd64.whl Python 3 none Windows x86-64 Details
konstruktor-0.31.1-py3-none-musllinux_1_2_x86_64.whl Python 3 none Linux musl 1.2+ x86-64 Details
konstruktor-0.31.1-py3-none-manylinux_2_28_x86_64.whl Python 3 none Linux glibc 2.28+ x86-64 Details
konstruktor-0.31.1-py3-none-manylinux_2_28_aarch64.whl Python 3 none Linux glibc 2.28+ ARM64 Details
konstruktor-0.31.1-py3-none-macosx_11_0_arm64.whl Python 3 none macOS 11.0+ ARM64 Details
konstruktor-0.31.1-py3-none-macosx_10_12_x86_64.whl Python 3 none macOS 10.12+ x86-64 Details

Total release size: 34.1 MB

Release files / konstruktor-0.31.1-py3-none-win_amd64.whl

Download URL konstruktor-0.31.1-py3-none-win_amd64.whl
Size 5.9 MB
Tags Python 3 Windows x86-64
SHA-256 checksum
How to use checksums
f9298330ca4fe8d7416b0653c3011978b768f99bf0cae89768b9955da8cdd52a
BLAKE2b-256 checksum
How to use checksums
038fb1472c5efaa93646f03f7b991267286cfc0285b04558a9b05217d0f91ae6
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 20, 2026.

Transparency log

Release files / konstruktor-0.31.1-py3-none-musllinux_1_2_x86_64.whl

Download URL konstruktor-0.31.1-py3-none-musllinux_1_2_x86_64.whl
Size 5.9 MB
Tags Linux musl 1.2+ x86-64 Python 3
SHA-256 checksum
How to use checksums
662d3174ed6234f895d928c2ab6b48919017a95dcdc2857e8d038780e5ebe659
BLAKE2b-256 checksum
How to use checksums
ec0224eeea433709d01101068449433cfde3b5a15ce58a12295c4e902e7fc218
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 20, 2026.

Transparency log

Release files / konstruktor-0.31.1-py3-none-manylinux_2_28_x86_64.whl

Download URL konstruktor-0.31.1-py3-none-manylinux_2_28_x86_64.whl
Size 5.8 MB
Tags Linux glibc 2.28+ x86-64 Python 3
SHA-256 checksum
How to use checksums
481d2a58e7c5867c6bda84ade62228029bf29d1bc0f46b9cb27709629cb6ad11
BLAKE2b-256 checksum
How to use checksums
286fdae5ec705b41959629826e572b60d8b626aadbce06d11b39adc5878f7cf3
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 20, 2026.

Transparency log

Release files / konstruktor-0.31.1-py3-none-manylinux_2_28_aarch64.whl

Download URL konstruktor-0.31.1-py3-none-manylinux_2_28_aarch64.whl
Size 5.4 MB
Tags Linux glibc 2.28+ ARM64 Python 3
SHA-256 checksum
How to use checksums
f2a7c03532f12f677c80cac9eb344380f23cc3b9a050f9796a3e2b1c1848c428
BLAKE2b-256 checksum
How to use checksums
71d018f622c0cb412b9247c65d076ca1310e7fc83b6c232a8b97d765ca914de9
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 20, 2026.

Transparency log

Release files / konstruktor-0.31.1-py3-none-macosx_11_0_arm64.whl

Download URL konstruktor-0.31.1-py3-none-macosx_11_0_arm64.whl
Size 5.4 MB
Tags Python 3 macOS 11.0+ ARM64
SHA-256 checksum
How to use checksums
6604932d0099abce6b5fc50fa0e2fcfff5c338f324b314bc80b6aa7535fa9b55
BLAKE2b-256 checksum
How to use checksums
1237e4d7fb50c4f21d1352a30f65326d78fdffa7ce718a6dee0093f80401feac
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 20, 2026.

Transparency log

Release files / konstruktor-0.31.1-py3-none-macosx_10_12_x86_64.whl

Download URL konstruktor-0.31.1-py3-none-macosx_10_12_x86_64.whl
Size 5.7 MB
Tags Python 3 macOS 10.12+ x86-64
SHA-256 checksum
How to use checksums
950eb09e5d489e4c97d1614edcd630b109fe82d1242a98daf181310253562b42
BLAKE2b-256 checksum
How to use checksums
730f00a90ac98e43bbe06c0f123927afe50d9f2a818fab0e915698bbb4a2bce3
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 20, 2026.

Transparency log

Security for konstruktor 0.31.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 6 files in this release have been uploaded with provenance metadata.

Select from 6 files

Attestation for konstruktor-0.31.1-py3-none-win_amd64.whl

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 20, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page