Skip to main content

Tinkerbox for Apple Neural Engine

Run models on Apple's Neural Engine through Core AI. Critical inference runs on the Neural Engine, the CPU does supplementary work such as tokenization and small heads, and the GPU stays idle.

Model Task Notes
LiquidAI/d1-3B (d1-3b) Decisions over text and images docs/models/d1.md

Requires Apple Silicon (M4 or newer), macOS 27, and Python 3.12 or 3.13. Earlier generations (M1–M3) are not supported due to Neural Engine hardware and offline compiler constraints.

Quickstart

Install the wheel from the GitHub release (Xcode is not required):

python -m pip install ./tinkerbox_ane-*.whl
import tinkerbox_ane

with tinkerbox_ane.load("d1-3b") as model:
    result = model.system_one(
        "I was charged twice this month.",
        {"refund": {"type": "noul", "instructions": "Is this a refund request?"}},
    )
    print(result)

tinkerbox_ane.load(model_id) loads any model in the catalog and returns the API for its task. It downloads the Core AI bundle for this Mac into ~/Library/Caches/tinkerbox-ane/models/<model>/<revision>/; pass a directory as the second argument to select a local AOT bundle. Each model package also has its own load(), such as tinkerbox_ane.d1.load().

Decision models expose the System One API: system_one, system_one_batch, probabilities, and probabilities_batch for binary, choice, and score queries, plus count_tokens. Several questions about one input share its computation. Inputs, limits, and execution details are in each model's notes.

Tinkerbox app

A standalone desktop application is in app. To build and launch it from source:

uv run --no-project --python 3.12 python app/run.py

Pass --build-only to create artifacts/swiftui/Tinkerbox.app and the release ZIP without launching. The prebuilt app manages its own Python environment and dependencies via an embedded uv binary.

Architecture & Staging

The Swift host manages recurrent state and allocates attention cache buffers dynamically. Initial execution compiles and specializes the AOT asset for the local ANE hardware, after which Core AI reuses its persistent cache.

Weight staging uses an APFS copy-on-write workaround to eliminate redundant disk writes during specialization.

Adding a Model

Model-independent infrastructure lives at the package top level and is shared across models:

Module Role
host.py, host.swift Native Core AI host: tiered caches, packed chains and trees, RoPE tables, and named vision inputs
bundle.py Bundle manifest and asset identity verification, downloads, and AOT compilation
coreai.py, guard.py, publish.py Compiler watchdog, ANE placement verification, and Hugging Face releases
models.json, models.py Model catalog shared by tinkerbox_ane.load() and the app

A model package (such as tinkerbox_ane.d1) provides:

  • Neural Graph & Export: Fused FP16 graph (model.py) and Core AI export (export.py).
  • Runtime: Tokenization, prompt formatting, readout (runtime.py), and optional tree planning (tree.py) or vision processing (vision.py).
  • Package Interface: Exposes load(asset=None), bundle KIND, and compile/publish CLI wrappers.

To register a model, add an entry to src/tinkerbox_ane/models.json specifying id, name, publisher, summary, task, repo, revision, and min_version. Add notes in docs/models/<id>.md.

Building from Source

Building requires Xcode 27 / Swift 6.4 and uv:

uv sync --locked
uv build

The wheel in dist/ bundles the native tinkerbox-ane-host executable and links against macOS system frameworks. Source and editable installs compile the host during installation. Compilation verifies source identity, function manifests, and full ANE placement.

Each model's notes describe its export, compile, and publishing commands. Reusable Core AI compilation and Hugging Face publishing utilities are provided in tinkerbox_ane.coreai and tinkerbox_ane.publish; see the model publishing guide. To use a compiled bundle locally before publishing:

uv run python -m tinkerbox_ane.install <model> <bundle directory>

Continuous Integration and Releases

The Build workflow runs on pushes and pull requests on GitHub's Xcode 27 runners: it builds the wheel with the native host, type-checks the app and the Shortcuts smoke target, and builds the app. Tests, model export and compilation, and Hugging Face publishing stay local, since they need the Neural Engine and the checkpoints.

To release, run from a clean tree:

uv run python scripts/release.py

The script checks that every catalog model shipped by this version has its Hugging Face tag, runs the tests, and creates a local annotated tag; it pushes nothing. Pushing the tag starts the Release workflow, which builds the wheel and the app signed with the developer identity, publishes the wheel to PyPI through trusted publishing, then attaches both to a draft GitHub release. The app installs that wheel from PyPI on first launch. The PyPI trusted publisher uses the WeGoToMars/tinkerbox repository, release.yml workflow, and pypi environment. The workflow reads the repository secrets APPLE_DEVELOPER_P12 (the base64-encoded identity) and APPLE_DEVELOPER_P12_PASSWORD; no PyPI token is needed.

Tests

uv run python -m tinkerbox_ane.d1.guard artifacts/validation/smoke -- uv run pytest -q

The public API tests require a local bundle and cached checkpoint. Reference validation against the official model is per model; see its notes.

Licenses

Model weights and upstream code keep their own licenses: d1-3B is pinned to LiquidAI/d1-3B@051bcc464b01b9f92942b364d9586b0ef5912432 under the LFM Open License v1.0. See NOTICE.

Metadata

Release files for tinkerbox-ane 2.0.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Built distribution (wheel)

Table of built distributions (wheels) for tinkerbox-ane 2.0.0
File Interpreter ABI Platform
tinkerbox_ane-2.0.0-py3-none-macosx_26_0_arm64.whl Python 3 none macOS 26.0+ ARM64 Details

Release files / tinkerbox_ane-2.0.0-py3-none-macosx_26_0_arm64.whl

Download URL tinkerbox_ane-2.0.0-py3-none-macosx_26_0_arm64.whl
Size 125.5 kB
Tags Python 3 macOS 26.0+ ARM64
SHA-256 checksum
How to use checksums
cb22fa086b308097b0290c3bf6f698a9b146a711b5bbc3ee33954e3ed880ed9f
BLAKE2b-256 checksum
How to use checksums
2a87e59eb949e48820fd5bc379e70ef5bd632945c23c3b66f7f7c56862c9731c
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via uv/0.11.28 {"installer":{"name":"uv","version":"0.11.28","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}

Security for tinkerbox-ane 2.0.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page