Togeari
A machine that runs thousands of KIR jobs at once, out of order, on pluggable engines, and checks recorded runs against the reference interpreter.
A KIR program describes one job as a plain sequential run: call this node, branch on that
value, loop over these items. Togeari runs many such jobs together the way an out-of-order
CPU core runs a thread. Inside a job it overlaps everything the sequential run cannot tell
apart; across jobs it batches calls to the same engine and keeps every engine unit busy.
kohakunode's reference interpreter defines what each job must produce, and the
conformance checker replays recorded runs through it.
$ python examples/parallel/machine.py
part 1: one city, one job
conformance: 1/1 jobs match the reference
Kyoto weather |############### | 0.00s
Kyoto events |########## | 0.00s
Kyoto traffic |############ | 0.00s
Kyoto survey north |##### | 0.00s
Kyoto survey harbor |##### | 0.00s
Kyoto survey old town |##### | 0.00s
Kyoto survey west |##### | 0.00s
Kyoto survey station |##### | 0.00s
Kyoto alert | ####### | 0.30s
summary: storm, 15 events, traffic 0.5, storm warning for Kyoto, district scores [5, 2, 6, 8, 9]
strands at once (peak): 3
calls in flight at once (peak): 8
(a strand ends once it has fetched its code; its calls stay in flight after it)
one job: 0.45s; the same calls one after another: 1.40s
One job of a sequentially written program (examples/parallel):
the two parallel arms, an independent lookup and five district surveys all run at once;
the surveys do not wait for the storm branch to be decided, and alert starts the moment
weather returns.
- Out of order, exactly. Each job is a thread; each statement an instruction. Writes
are renamed to value slots, statements issue as soon as their inputs exist, and a per-job
window retires them in program order. Failures are precise: they are taken in program
order, younger work is squashed, and
@trybehaves as in the sequential run. - Run-ahead without guessing. A branch whose condition is still being computed parks;
the code after its reconvergence point keeps going.
eachruns one strand per item. Nothing runs on a path the sequential run would not take. - One job, many strands; many jobs, one machine. A job is never split into sub-jobs: its strands share one window and one order. Thousands of jobs, of any number of programs, share one code memory and one dispatcher.
- Lanes and multi-issue. A lane holds interchangeable units of one engine kind (call, batch or stream). It queues ready calls from every job, forms batches, picks units by a policy, multi-issues to every unit with free capacity, retries on unit errors, fails over, times out, and takes units in and out while running.
- Engines are contracts. The machine defines what an engine provides and how it
behaves (B1–B7:
submitnever blocks, exactly one result per item, honest capacity, item errors apart from unit errors).check_engineandtogeari unitstest any engine against them. Builtins:PythonCallEngine(threads or processes),WebCallEngine(any HTTP service),TorchEngine(models sharing devices under one scheduler). - Effects stay in order.
orderednodes run when the sequential run would reach them;mutatesnodes change values in place without older readers seeing it. - Plugins at every seam. Admission, submit, results, faults, the sink, unit state, the event bus, queries and commands. Counters, the run report, the trace, the conformance recorder, the HTTP inspector and the budget are ordinary plugins.
- Inspectable and supervised. Queries and commands go through the dispatcher's inbox and see one consistent state. A failing job fails alone, a failing plugin is disabled, and a dead dispatcher answers every caller instead of hanging.
- Proof. Every node call of a recorded job is kept in retire order;
togeari conformreplays it throughkohakunode, and--reexecuteruns chosen nodes again to catch a result delivered to the wrong statement.
Install
pip install togeari # core (kohakunode >= 0.2.2)
pip install "togeari[web]" # WebCallEngine (httpx)
pip install "togeari[torch]" # TorchEngine
pip install "togeari[vault]" # KohakuVault store, source and sink
pip install "togeari[report]" # zstd-compressed run report events
From a clone (Windows PowerShell or bash):
git clone https://github.com/KohakuBlueleaf/Togeari && cd Togeari
uv venv -p 3.12
uv pip install -e ".[web,vault,dev]" # add torch from the index matching your driver
togeari doctor
Python 3.10+. togeari doctor prints versions, devices and any leftover worker processes.
Quick start
A machine is a program, its node library, and where each node runs:
from pathlib import Path
from kohakunode import NodeLibrary
from togeari import Inline, Lane, Machine, Use
from togeari.engines.python import PythonCallEngine
from togeari.io import Iterable, Memory
lib = NodeLibrary("demo")
@lib.node(outputs=["y"])
def slow_double(x: int) -> int:
return 2 * x
@lib.node(outputs=["total"])
def add_up(ys: list) -> int:
return sum(ys)
PROGRAM = """
@def (xs: list)main(total):
ys = []
(xs)each(x, `one`)
one:
(x)slow_double(y)
(ys, y)append(ys)
(ys)add_up(total)
"""
work = Lane([PythonCallEngine(workers=4, mode="thread")], name="work")
machine = Machine(
program=PROGRAM,
entry="main",
libraries=[lib],
bind={"slow_double": Use(work), "add_up": Inline(), "kir.std.*": Inline()},
)
with machine:
sink = Memory()
machine.run(Iterable([{"xs": [1, 2, 3]}, {"xs": [4, 5]}]), sink)
print(sorted(r.outputs["total"] for r in sink.records))
It prints [12, 18]. Records reach the sink as jobs finish, so their order is not the input
order. Keys are strings (Iterable without key= gives "0", "1", …), so sort by a value
the job carries, or give key=. A str program is KIR text; a Path is a file.
For a machine module (a file with build() returning the machine, a source and a sink),
with the module's folder on PYTHONPATH so the CLI can import its node library:
togeari check examples/hello/machine.py # build, start no unit, print every problem
togeari run examples/hello/machine.py --report runs/hello
togeari conform runs/hello --lib nodes:lib # replay every recorded job
togeari conform runs/hello --lib nodes:lib --reexecute compose
togeari decode examples/hello/hello.kir --entry greet --lib nodes:lib
togeari units examples/hello/machine.py # engine behaviour checks on every unit
| Command | Does |
|---|---|
togeari check MACHINE |
builds the machine without starting a unit and prints every problem |
togeari run MACHINE [--limit N] [--report DIR] |
runs the module's source into its sink; with --report, a full run report |
togeari conform DIR [--lib M:A] [--run ID] [--reexecute NODE] [--no-engine-errors] |
replays recorded jobs through the reference; re-executes the named nodes |
togeari decode PROGRAM --entry E [--lib M:A] |
prints the decode tables of one entry |
togeari units MACHINE [--unit U] [--rounds N] |
runs the engine behaviour checks (B1–B7) on every unit with samples |
togeari doctor |
versions, devices, leftover worker processes |
Examples
| Example | Shows |
|---|---|
hello |
each, switch, @try around a slow service; conformance against the reference |
multi_unit |
one lane, three units of different speed; the fastest goes down and comes back |
trace_replay |
stream, call and batch lanes side by side on replayed latency samples |
parallel |
one job's independent work at once: parallel arms, run-ahead past a branch, an each fan-out, with a timeline |
mixed |
the builtin engines together: an HTTP registry, Python worker processes, a network on cuda:0, ordered log writes, every job recorded and conformed |
Their output on the release tree:
$ python examples/hello/machine.py
Ayu: 3 cards ['Hello, Ayu!', 'Konnichiwa, Ayu!', 'Bonjour, Ayu!']
Bao: 4 cards ['Ni hao, Bao!', 'Hola, Bao!', 'Hallo, Bao!', 'Hello, Bao!']
Chi: 1 cards ['Konnichiwa, Chi!']
Dev: 3 cards ['Bonjour, Dev!', '?, Dev!', 'Hello, Dev!']
Eli: 0 cards []
conformance: 5/5 jobs match the reference
5 jobs, 38 node calls in 1.05s
$ python examples/multi_unit/machine.py
40 jobs in 2.06s, wrong results: none
conformance: 40/40 jobs match the reference
lane work: retries 1, units down 1, back up 1
unit slow state up items 90 errors {}
unit medium state up items 179 errors {}
unit fast state up items 211 errors {'SimOutage': 1}
$ python examples/trace_replay/machine.py
60 documents in 1.70s, kept 41
one job at a time, one call at a time: about 40.4s
lane fetch submitted 60 batch sizes {}
lane score submitted 243 batch sizes {7: 10, 5: 3, 6: 10, 4: 5, 3: 3, 8: 4, 9: 2, 12: 1, 2: 2, 1: 3}
lane parse submitted 243 batch sizes {}
conformance: 60/60 jobs match the reference
$ python examples/mixed/machine.py # an HTTP registry, 8 worker processes, a network on cuda:0
st003: calm/strong ['calm/strong', 'calm/strong', 'calm/strong', 'calm/strong', 'calm/strong', 'pulse/strong', 'calm/strong']
st004: calm/weak ['calm/weak', 'calm/weak', 'calm/weak', 'calm/weak', 'calm/weak', 'calm/weak', 'calm/weak', 'calm/weak']
...
... 120 stations, 0 failed
conformance: 120/120 jobs match the reference
ordered log: 0 problem(s)
120 jobs, 5634 node calls in 4.07s
$ PYTHONPATH=examples/mixed togeari conform runs/mixed/report --reexecute features --reexecute classify --reexecute majority
run 20261020-193833-105752-4c2a71: 120/120 conform; 0 with weak values; 0 weak digests
120/120 jobs conform; 0 with weak values; 0 weak digests
In mixed, twelve stations are unknown to the registry: their lookup fails inside
@try, the fault is taken in program order, and the job continues with gain 1.0. Each
station's note lines reach the survey log in window order, followed by its verdict,
while the windows themselves are computed out of order.
Builtin parts
| Engine | Kind | For |
|---|---|---|
PythonCallEngine(workers, mode="thread" | "process", transport="pickle" | "shm", imports=) |
call | node functions off the dispatcher; process workers import node libraries at start, restart after a crash, and are killed and replaced when a cancelled item hangs |
WebCallEngine(base_url, max_inflight, rate, pool_size, health_path, connect_timeout_s, on_unit_error) |
call | any HTTP service through an adapter (JsonHttp); Retry-After, 429 / 503 and connections that do not open as unit errors; on_unit_error lets the other requests finish ("block") or answers them at once ("cancel"); a token bucket |
TorchEngine(devices, memory_cap_gb, schedule, isolation) |
batch, one unit per model | models sharing devices: co_resident, swappable, priority_streams; thread or process isolation; allocator cap set before weights load |
SimCall / SimBatch / SimStream |
any | simulated engines with latency models, item errors and outages |
| Policy | Builtins |
|---|---|
| admission | Fixed(n), TargetLoad(lane, waiting=), MemoryBound(bytes), All(...) |
| issue order | Fifo, OldestJobFirst, DeepestFirst, LaneAware, HintPriority |
| batch forming | SizeOrWait(size, wait_ms), Bucketed(inner, key), Greedy |
| unit choice | LeastLoaded, Throughput, Affinity(key=), RoundRobin, ByHint |
| Plugin | Does |
|---|---|
Counters() |
per-second counters: dispatcher, lanes, units, jobs, work |
RunReport(path) |
spec.json, env.json, metrics.jsonl, events.jsonl[.zst], records, summary.json, written as the run goes |
Perfetto(path) |
a trace with a track per unit, lane queue and dispatcher phase |
Recorder(path) |
conformance records per run, programs keyed by semantic hash (RunReport embeds one) |
Inspector(port=0) |
HTTP queries, JSON commands (host / origin checked, a random access token by default) and an event stream |
Budget(max_jobs=, max_calls_per_node=, walltime_s=) |
stops admitting or blocks submits past its caps |
The main knobs (the full table, with the debug knobs and the Machine arguments, is in
writing a machine):
| Knob | Default | |
|---|---|---|
window |
64 | unfinished statements per job |
retire_buffer |
4096 | done statements waiting to retire, per job |
run_ahead |
True | park at a pending branch and continue after it |
mutates |
"copy-if-speculative" |
or "wait", "copy-always" |
record |
None | the fraction of jobs recorded for conformance |
events |
"sampled" |
or "all", "counters" |
snapshot_every |
None | retire boundaries between job snapshots |
step_budget |
None | instructions a job may execute |
plugin_errors |
"disable" |
or "log" |
gc_threshold |
(50000, 20, 100) |
the process collector threshold while running; None keeps the process's own |
squash_reuse |
1024 | results kept per job after a taken fault, reused when the refetched call's inputs match; 0 re-sends |
squash_reuse_bytes |
64 MiB | bytes of those results kept per job; None: no byte cap |
Every knob can change while the machine runs (machine.command("set_knob", ...)).
Measured
All on one desktop machine with one GPU for the device rows, on the release tree; each block names its method. Full tables: docs/performance.
Dispatcher ceiling (scripts/benches/dispatcher_ceiling.py: simulated engines that
answer at once, so the dispatcher is the only cost; median of five rounds):
| workload | node calls/s | jobs/s | dispatcher busy |
|---|---|---|---|
| a chain of inline nodes | 80,758 | 4,038 | 1.00 |
| a chain of calls on an engine lane | 28,530 | 1,427 | 0.83 |
each with batched calls |
40,354 | 400 | 0.92 |
With the process's own collector threshold (gc_threshold=None), interleaved in the same
rounds: 74,160, 28,104 and 37,931 node calls/s (the default is 2–9% ahead).
Cost does not grow with load (scripts/benches/scaling.py, dispatcher µs per job
or per each item; the minimum of three runs):
| resident jobs | 500 | 2,000 | 8,000 |
|---|---|---|---|
| µs per job | 54.2 | 52.8 | 55.6 |
items in one each |
250 | 1,000 | 4,000 |
|---|---|---|---|
| µs per item | 76.8 | 79.7 | 82.8 |
Engines (study S1, scripts/studies/s1/run.py --scale full, 33 configurations, one run
each):
| measurement | result |
|---|---|
| handoff to a worker process, 1 KB / 2 MB | pipe 183 µs / 4.8 ms; shared memory 59 µs / 1.0 ms |
| pure-Python CPU work, 8 workers | thread 364 items/s; process 2,748 items/s |
| GIL-releasing work, 8 workers | thread 4,035 items/s; process 3,380 items/s |
| a 64 × 1024 network through a lane, dispatcher at 100 jobs/s | thread 4,050 items/s (busy 0.40); process 5,609 items/s (busy 0.63) |
| two models sharing the device (with both / alone) | priority_streams 0.53 / 0.95; co_resident 0.50 / 0.47; swappable 0.17 / 0.11 |
| HTTP client CPU per request | 0.61–0.83 ms; a rate-limited lane holds 100 and 500 requests/s exactly |
The builtin defaults follow these numbers: PythonCallEngine(mode="thread", transport="shm") with shared memory from 1 MiB, TorchEngine(schedule= "priority_streams", isolation="thread").
examples/mixed (120 jobs, three engines, every job recorded; one run): 5,634 node
calls in 4.07 s, 29 jobs/s; 120 / 120 jobs conform in replay and in re-execution.
How measured:
- The ceiling rows are the median of five interleaved rounds; the scaling rows the minimum of
three runs; S1 and
examples/mixedone run each. S1 shared the machine with short example runs during its first 9 minutes (M1 and the first M2 configurations). - The benches record nothing and publish events to no subscriber; the examples record
every job (
record=1.0) and runRunReportwhere shown, so their times include recording (a digest and a copy per call) and event writing. - "dispatcher busy" is the dispatcher thread's busy fraction: its time outside the inbox wait over the run's wall time.
tests/scalingfails when the cost at 4N is above twice the cost at N.- S1: each phase is a 1 s warm-up then a 2.5 s window; raw JSON and logs in
runs/s1/full/.
Architecture
Packages under src/togeari/:
flowchart LR
examples["machine modules, examples, CLI"] --> machine["core.construct: Machine"]
machine --> program["core.program: code memory, decode tables, bind"]
machine --> runtime["core.runtime: dispatcher"]
runtime --> lanes["core.lanes"]
lanes --> policies["core.policies"]
lanes --> contracts["core.contracts: engines, results, work items"]
runtime --> plugin["core.plugin + core.observe: hooks, bus"]
engines["engines: python, web, torch"] --> contracts
plugins["plugins: counters, report, recorder, inspector, budget"] --> plugin
conformance["conformance"] --> kohakunode["kohakunode reference"]
program --> kohakunode
A statement's path through the machine:
flowchart LR
fetch["fetch: rename writes to slots"] --> wait{"inputs filled?"}
wait -->|"no"| park["wait on the slots"]
park --> wait
wait -->|"yes"| issue["issue: policy order"]
issue --> inline["inline node: run on the dispatcher"]
issue --> lane["lane queue"]
lane --> form["form a batch / pick a unit"] --> engine["engine unit"]
engine -->|"done -> inbox"| writeback["writeback: fill slots, wake waiters"]
inline --> writeback
writeback --> retire["retire in program order"]
retire -->|"fault taken"| squash["squash younger; @try handler"]
retire --> sink["job ends: record to the sink"]
Inside one job: strands share one window and one order key space:
flowchart TB
s0["strand 0: main"] -->|"branch condition pending: park"| s1["strand 1: code after the branch, reading phis"]
s0 -->|"each over 5 items"| it["5 iteration strands, started in index order"]
s1 --> win[("one window, retired in key order")]
it --> win
s0 --> win
A lane:
flowchart LR
q[("bucketed queue")] --> former["former: batch when full or waited"]
former --> sel["selector: unit order, admits"]
sel --> u1["unit A"]
sel --> u2["unit B"]
sel --> u3["unit C (down: health polls)"]
u1 -->|"UnitError"| retry["back to the queue after backoff"] --> q
Where plugins hook in:
flowchart LR
src["source item"] -->|"pre_admit, vote_admit"| job["job admitted"]
job -->|"on_job_start"| run["statements run"]
run -->|"pre_submit"| unit["engine unit"]
unit -->|"post_result"| wb["writeback"]
wb --> run
run -->|"on_fault"| run
run -->|"on_job_end, pre_sink"| sink["sink"]
bus[("event bus")] -->|"on_event (own thread)"| plugins["plugins"]
lanes["lanes"] -->|"on_unit_state"| plugins
plugins -->|"contribute_queries / commands / policies"| inbox["dispatcher inbox"]
The design is in docs/: concepts, guides (writing a machine, an engine, a plugin; tuning; conformance; the examples) and internals (every module).
Checks
python -m pytest tests -q -m "not gpu" # CPU only (seeds default 20)
python -m pytest tests -q -m gpu # the tests on cuda:0, on their own
TOGEARI_SEEDS=300 python -m pytest tests/machine/generated -q
python scripts/benches/dispatcher_ceiling.py
python scripts/benches/scaling.py
python scripts/studies/s1/run.py --scale full # thread vs process, transports, GPU sharing
The generated suite runs programs from kohakunode.testing.progen (switch, parallel,
ordered and mutates nodes with aliases, each with exits, @try around each, failing
nodes) under 12 configurations (windows 1 / 64 / 256, injected item errors and unit
outages, early forming, every selector, run-ahead off, every mutates mode, a content
store, a pass-through plugin on every hook), several programs in one machine with one
loaded mid-run, snapshot resume and positional reruns; every job is re-executed against the
reference.
Contributing
Open an issue first for a feature. The code conventions are in CLAUDE.md: black and ruff at line length 100, no imports inside functions, nested folders, short comments that say what the code does, docs that describe what exists, and every check able to fail on a broken implementation. Run the checks above before a pull request.
License
Apache-2.0.
Metadata
Release files for togeari 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| togeari-0.1.0.tar.gz | 421.1 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| togeari-0.1.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 664.1 kB
Release files / togeari-0.1.0.tar.gz
| Download URL | togeari-0.1.0.tar.gz |
|---|---|
| Size | 421.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
a41f2dc43976ee2933c982bef97e39b7f3ff2cd86a90a417f87f572d4cc18354
|
|
BLAKE2b-256 checksum How to use checksums |
834f18a56d04ac5b40f38628c6cb81aaea22208b8b353518b6f0855c70de6e00
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 20, 2026.
Transparency logRelease files / togeari-0.1.0-py3-none-any.whl
| Download URL | togeari-0.1.0-py3-none-any.whl |
|---|---|
| Size | 242.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
0aa14c7a7c255e6450ca33a7d2f7052d3b08c3126a03fc26ff3951bcd488ef9c
|
|
BLAKE2b-256 checksum How to use checksums |
ed143eed69674fd2c576edbb1c439ffa41211893bccd40e7a21470f74adba165
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 20, 2026.
Transparency logSecurity for togeari 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for togeari-0.1.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 20, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.