Deterministic testing and replay framework for AI agents
Project description
KURRAL
Deterministic Testing and Replay for AI Agents
⭐ If Kurral saves you hours (or dollars), please star the repo — it helps a lot!
Kurral is a powerful open-source testing and replay framework that brings control and reliability to AI agent development. It captures complete execution traces of your agents, enabling intelligent replay for regression detection, debugging, and quantifiable A/B performance comparison.
Table of Contents
- Why Kurral?
- Key Features
- When to Use Kurral
- How It Works
- Installation
- Quick Start
- Centralized Storage (Kurral API)
- Deep Dive
- Architecture
- Best Practices
- Contributing
Why Kurral?
Testing AI agents is fundamentally different from testing traditional software:
- Non-deterministic outputs: LLMs don't return the same response twice
- Expensive API calls: Every test run costs money
- Complex orchestration: Multi-step tool chains are hard to debug
- No ground truth: How do you know if a change broke something?
Standard testing approaches (unit tests, mocks, integration tests) fall short because they assume deterministic behavior.
Kurral's solution: Treat agent executions as replayable artifacts - complete snapshots of behavior that can be validated, compared, and debugged deterministically.
Key Features
Automatic Artifact Generation
- Captures complete execution traces: inputs, outputs, tool calls, LLM configs, and prompts
- Zero configuration - just add two lines to your agent code
- Session-based: accumulates all interactions within a single
main()run
Intelligent Replay System
- Automatically detects changes (LLM model, tools, prompts, graph structure)
- Switches between Level 1 (deterministic) and Level 2 (exploratory) replay
- Semantic tool matching (85% threshold) caches similar tool calls to reduce API costs
- Side Effect Protection: Prevents dangerous operations (emails, payments, writes) during replay
Quantifiable Regression Detection
- Agent Regression Score (ARS) measures replay fidelity (0.0-1.0)
- Combines output similarity and tool call accuracy
- Use in CI/CD to catch regressions before deployment
Developer-Friendly Integration
- Works seamlessly with LangChain's
AgentExecutorand ReAct agents - Minimal code changes - just
@trace_agent()decorator andtrace_agent_invoke()wrapper - Artifacts saved as readable JSON in
artifacts/directory - Intelligent Side Effect Detection: Auto-generates configuration with smart suggestions based on tool names and descriptions
When to Use Kurral
- ✅ Regression testing: Verify that code changes don't break existing behavior
- ✅ Model upgrades: Test if GPT-4.5 behaves better than GPT-4 on your tasks
- ✅ Prompt engineering: Compare different prompt variations quantitatively
- ✅ Debugging failures: Reproduce and analyze production issues locally
- ✅ CI/CD integration: Fail builds if ARS drops below threshold
How It Works
Kurral records the complete execution session (Artifact), which can include multiple user interactions, tool calls, and LLM steps within a single run of your agent's main() function.
💡 What's an Artifact? A
.kurralfile is a complete snapshot of your agent's execution - think of it as a "recording" that captures every LLM call, tool execution, and decision point. You can replay this recording later to verify behavior or test changes.
You can then replay this comprehensive session artifact against new code, different LLM configurations, or modified prompts. This allows you to verify behavioral consistency across the entire user dialogue, not just a single prompt-response cycle.
Intelligent Replay Levels
Kurral detects what changed between runs and automatically switches strategies based on the replay level required:
-
Level 1 Replay (Deterministic): Logic changes? This mode achieves true deterministic testing of your agent's internal logic. It mocks the LLM entirely using the cached output from the artifact to verify that your agent code and tool orchestration remain identical (Zero API cost).
- ✅ Zero API costs
- ✅ Perfect for regression testing
- ✅ Verifies logic without re-running LLM
-
Level 2 Replay (Non-Deterministic / Exploratory): Model or Prompt changes? This mode facilitates A/B testing. It re-runs the LLM live but intelligently caches tool calls using semantic matching to benchmark the quality of the new model or prompt against the original run.
- ✅ Benchmark new models against original runs
- ✅ Test prompt variations
- ✅ Reduced API costs via semantic tool caching
With minimal code changes (just two lines), Kurral's captured artifacts unlock intelligent, production-ready replay capabilities.
Installation
From PyPI (Recommended)
pip install kurral
From Source
# Clone the repository
git clone https://github.com/kurral-dev/kurral.git
cd kurral
# Install dependencies
pip install -r requirements.txt
# Or install in development mode
pip install -e .
Quick Start
1. Integrate Kurral into Your Agent
Add Kurral to your existing LangChain agent with just two changes:
from kurral import trace_agent, trace_agent_invoke
@trace_agent()
def main():
# Your existing agent setup
llm = ChatOpenAI(model="gpt-4", temperature=0)
tools = create_tools()
agent = create_react_agent(llm, tools, prompt)
agent_executor = AgentExecutor(agent=agent, tools=tools, verbose=True)
# Replace agent_executor.invoke() with trace_agent_invoke()
result = trace_agent_invoke(agent_executor, {"input": user_input}, llm=llm)
return result
That's it! Kurral will automatically:
- Generate artifacts in
artifacts/directory - Capture all interactions within the session
- Save a single artifact per
main()execution
2. Run Your Agent
python agent.py
After execution, you'll see:
[Kurral] Session artifact saved: artifacts/4babbd1c-d250-4c7a-8e4b-25a1ac134f89.kurral
[Kurral] Run ID: local_agent_1234567890
[Kurral] Kurral ID: 4babbd1c-d250-4c7a-8e4b-25a1ac134f89
[Kurral] Total interactions: 1
3. Configure Side Effects (First Time Only)
On your first replay, Kurral will auto-generate a side_effect/side_effects.yaml file with intelligent suggestions:
tools:
send_email: false # Side effect - blocked during replay
tavily_search: true # Safe - allowed during replay
done: false # Set to true after reviewing
Kurral automatically analyzes tool names, descriptions, and docstrings for keywords like "update", "send", "write" (case-insensitive) and suggests which tools should be blocked.
First Replay Output:
============================================================
REPLAY BLOCKED: Side Effect Configuration Required
============================================================
The side effect configuration file has been auto-generated or needs review.
Please manually review and configure the side effects before replay:
Config file: my_agent/side_effect/side_effects.yaml
Tool Analysis & Suggestions:
------------------------------------------------------------
send_email: false [SIDE EFFECT]
→ Contains side effect keywords in name/description/docstring
tavily_search: true [SAFE]
→ No side effect keywords found
------------------------------------------------------------
Instructions:
1. Review each tool above - tools marked as SIDE EFFECT should be set to 'false'
2. Tools marked as SAFE can remain 'true' (unless you know they have side effects)
3. Manually edit the YAML file to adjust any values if needed
4. Set 'done: true' when you have finished configuring
Once you have set 'done: true', run the replay again.
============================================================
Important: You must manually set done: true after reviewing the configuration to allow replay.
4. Replay an Artifact
# Replay using the kurral CLI
kurral replay <artifact_id>
# Example
kurral replay 4babbd1c-d250-4c7a-8e4b-25a1ac134f89
# Or using partial UUID
kurral replay 4babbd1c
Kurral will automatically:
- Detect changes and determine replay type (Level 1 or Level 2)
- Check side effect configuration (blocks dangerous operations)
- Print replay results to stdout
- Save replay artifact to
replay_runs/directory - Report any changes detected
- Display ARS score
Centralized Storage (Kurral API)
By default, Kurral stores artifacts locally in the artifacts/ directory. For teams that need centralized storage, analytics, and collaboration, you can set up Kurral API.
What Kurral API Provides
- ☁️ Cloudflare R2 / S3 Storage: Store artifacts in your own bucket
- 🔐 Authentication: API keys with scopes and rate limiting
- 📊 Analytics: Time series data, aggregations, and statistics
- 🔍 Advanced Filtering: Query by tenant, environment, semantic bucket, model, and more
- 🏢 Multi-Tenant: Organize artifacts by team or project
Quick Setup
cd kurral-api
cp .env.example .env
# Configure your R2/S3 credentials in .env
docker-compose up -d
Connect Kurral to the API
from kurral import configure
configure(
storage_backend="api",
api_url="http://localhost:8000/api/v1",
api_key="kurral_YOUR_API_KEY"
)
For full API documentation, see kurral-api/README.md.
Deep Dive
Want to understand how Kurral works under the hood? Read on.
What's in a .kurral artifact?
Human-readable JSON with everything:
- All user/agent hashed messages
- Tool calls + results
- Exact prompt templates (resolved)
- LLM config (model, temp, seed, provider)
- Graph/tool schema hash
Artifact Generation
When you run your agent with Kurral, it automatically captures:
- Inputs: All user inputs for each interaction
- Outputs: Agent responses and final outputs
- Tool Calls: Complete tool execution traces (name, inputs, outputs, timestamps)
- LLM Configuration: Model name, provider, temperature, seed, and other parameters
- Prompt: Resolved prompt template with variables
- Graph Version: Hash of tool schemas and graph structure
- Metadata: Timestamps, duration, errors, token usage
All interactions within a single main() execution are accumulated into one session artifact.
Replay Types
Kurral uses intelligent change detection to determine the appropriate replay strategy:
Level 1 Replay (Deterministic)
- When: Everything matches (same LLM, tools, prompt template, graph structure)
- Behavior: Returns cached outputs directly without re-executing LLM or tools
- Use Case: Regression testing, verifying identical behavior
Level 2 Replay (Non-Deterministic / Exploratory)
- When: Something changed (different LLM, model parameters, tools, or prompt template)
- Behavior: Re-executes LLM with semantic tool call matching (85% similarity threshold)
- Use Case: Testing different models, comparing performance, A/B testing
Semantic Tool Matching
During Level 2 replay, Kurral uses semantic similarity to match tool calls:
- Exact Match: If tool name and inputs match exactly → use cached output
- Semantic Match: If similarity ≥ 85% → use cached output (no tool execution)
- New Call: If similarity < 85% → execute tool and cache result
This ensures:
- Reduced API costs (fewer tool executions)
- Faster replay execution
- Accurate cache hit/miss tracking
Side Effect Management
Kurral protects against dangerous operations during replay through a YAML-based configuration system:
Auto-Generation: On first replay, Kurral automatically:
- Discovers all tools used in your agent
- Analyzes tool names, descriptions, and docstrings
- Suggests side effect status based on keywords ("update", "send", "write")
- Creates
side_effect/side_effects.yamlin your agent directory
Configuration Format:
tools:
send_email: false # false = side effect (blocked), true = safe (allowed)
tavily_search: true
write_file: false
done: false # Must be set to true manually after review
How It Works:
- Cached Results Available: Side effect tools use cached outputs from the original artifact (no execution)
- No Cache Available: Side effect tools return a safe default message (blocked, never executed)
- Safe Tools: Normal tools execute if no cache match is found
Safety First: The done flag defaults to false, requiring manual review before any replay can proceed. This ensures you explicitly approve which tools can execute during replay.
Agent Regression Score (ARS)
ARS provides a quantitative measure of replay fidelity:
ARS = (Output Similarity + Tool Accuracy) / 2
Where:
- Output Similarity: Semantic similarity between original and replayed outputs
- Tool Accuracy: Ratio of correctly matched tool calls
ARS ranges from 0.0 to 1.0, where 1.0 indicates perfect replay fidelity.
Usage Examples
Basic Integration
from langchain.agents import AgentExecutor, create_react_agent
from langchain_openai import ChatOpenAI
from kurral import trace_agent, trace_agent_invoke
@trace_agent()
def main():
llm = ChatOpenAI(model="gpt-4", temperature=0)
tools = create_tools()
agent = create_react_agent(llm, tools, prompt)
agent_executor = AgentExecutor(agent=agent, tools=tools)
user_input = input("You: ")
result = trace_agent_invoke(agent_executor, {"input": user_input}, llm=llm)
print(f"Agent: {result['output']}")
if __name__ == "__main__":
main()
Multiple Interactions
Kurral automatically accumulates all interactions:
@trace_agent()
def main():
# ... setup agent ...
while True:
user_input = input("You: ")
if user_input.lower() == 'exit':
break
result = trace_agent_invoke(agent_executor, {"input": user_input}, llm=llm)
print(f"Agent: {result['output']}")
# All interactions saved in one artifact when main() exits
Replay Output
When you replay an artifact, Kurral provides detailed information:
[Kurral] Replay Type: Level 2 (Non-Deterministic)
[Kurral] Changes Detected:
- LLM Model: gpt-4 → llama-3.3-70b-versatile
- Provider: openai → groq
[Kurral] Replay Execution:
- Cache Hits: 1
- New Tool Calls: 2
- Unused Tool Calls: 0
[Kurral] ARS Score: 0.626
- Output Similarity: 0.5515
- Tool Accuracy: 0.8
[Kurral] Replay artifact saved: replay_runs/5a9d2627-4dec-4954-96af-b127ba038056.kurral
Architecture
Core Components
trace_agent: Decorator that wraps your agent's main functiontrace_agent_invoke: Wrapper foragent_executor.invoke()that captures tracesreplay: Replay engine with automatic Level 1/Level 2 detectionreplay_detector: Change detection logic and determinism scoringtool_stubber: Semantic tool matching and caching during replayside_effect_config: Side effect configuration management and auto-generationars_scorer: Agent Regression Score calculationartifact_manager: Artifact storage and retrieval
Artifact Structure
Kurral artifacts (.kurral files) are JSON files containing:
{
"run_id": "local_agent_1234567890",
"kurral_id": "4babbd1c-d250-4c7a-8e4b-25a1ac134f89",
"inputs": {
"interactions": [...]
},
"outputs": {
"interactions": [...]
},
"llm_config": {
"model_name": "gpt-4",
"provider": "openai",
"parameters": {...}
},
"tool_calls": [...],
"resolved_prompt": {...},
"graph_version": {...}
}
Current Limitations (we're working on them!)
- Only ReAct-style and LCEL agents fully supported (no native LangGraph streaming yet)
- Vision / image inputs not captured
- No built-in dashboard (yet – artifacts are JSON, just open one in VS Code/any editor)
Best Practices
- Always pass
llmparameter:trace_agent_invoke(agent_executor, input_data, llm=llm)ensures accurate LLM config extraction - Use session artifacts: Let Kurral accumulate interactions automatically within
main() - Check ARS scores: Monitor ARS to detect regressions when testing different models
- Review replay artifacts: Check
replay_runs/directory for detailed replay analysis - Handle optional dependencies: Kurral gracefully handles missing optional LLM packages
- Review side effect configuration: Always review
side_effect/side_effects.yamlbefore enabling replay (done: true) - Mark dangerous tools as side effects: Any tool that sends emails, makes payments, writes files, or modifies external state should be set to
false
Requirements
- Python 3.9+
- LangChain
- Pydantic
- Optional: OpenAI, Google Generative AI, Groq, or other LLM providers
License
Apache 2.0 - see LICENSE for details.
Contributing
Contributions are welcome! Please:
- Fork the repository
- Create a feature branch (
git checkout -b feature/amazing-feature) - Commit your changes (
git commit -m 'Add amazing feature') - Push to the branch (
git push origin feature/amazing-feature) - Open a Pull Request
Community
Join our Discord → https://discord.gg/pan6GRRV
Support
- Issues: github.com/kurral/kurral/issues
- Email: team@kurral.com
⭐ Star this repo if Kurral just saved you $50 in OpenAI credits.
Made with ❤️ for the agent-building community.
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file kurral-0.2.0.tar.gz.
File metadata
- Download URL: kurral-0.2.0.tar.gz
- Upload date:
- Size: 83.7 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.11.8
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
f367764ff712153d26402a6617b3a8cbbaf8000c122ae873f4ff82ee0f15a4ed
|
|
| MD5 |
7ff1e1c20243655f0ef7e319a2c7b615
|
|
| BLAKE2b-256 |
efa83020d87c7b8e2a456e316b8b4ceb028a48efb414e472da6c0aee50ce7ab4
|
File details
Details for the file kurral-0.2.0-py3-none-any.whl.
File metadata
- Download URL: kurral-0.2.0-py3-none-any.whl
- Upload date:
- Size: 89.9 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.11.8
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
fea2b79a6d396e60cba62c489b8d9b05cc2f7f0d7fddea42dd1a44125e3c7123
|
|
| MD5 |
f1839881bf4234abae4116e33fa10f20
|
|
| BLAKE2b-256 |
62606b59e423751e51d62eaeed1934a0b15abc709a62ecd08f61ba8dd9090832
|