Callable identity update: public Python submit APIs now accept
CallableHandle objects returned by Worker.register, and hierarchical task
mailboxes carry the handle's 32-byte hash digest. Target-local integer slots
remain private to the receiving worker. Older cid references in this document
describe historical or target-local internals; the authoritative contract is
callable-identity-registration.md.
This document specifies what data flows through the hierarchical runtime and what shapes it takes at each stage. It covers:
- The three handles carried through every level:
Callable,TaskArgs,CallConfig - The
ChipWorker::runexecution leaf at L2 - The L2 ABI edge where internal formats are converted to
ChipStorageTaskArgs - Recursive composition for L4+
- A single end-to-end walkthrough
For the components that move this data (how it's stored, dispatched, scheduled), see:
- orchestrator.md — submit flow, Ring, TensorMap, Scope
- scheduler.md — dispatch loop, queues, completion handling
- worker-manager.md — WorkerThread, mailbox IPC mechanics
- hierarchical_level_runtime.md — level model and how components compose
Every task flowing through any level carries exactly three pieces of data:
| Handle | Type | What it is |
|---|---|---|
CallableHandle / CallableIdentity |
hash digest + kind + namespace | What the target worker should execute; targets resolve the digest to a local slot |
TaskArgs |
user builder class | Tensors + scalars + per-tensor tags (IN/OUT/INOUT/etc.) |
CallConfig |
small POD | Execution knobs (block_dim, aicpu_thread_num, profiling/dump/PMU flags, …) |
Everything else in the engine is either plumbing (slots, ring, tensormap, scheduler) or target-local executable state resolved from the callable digest.
struct CallableIdentity {
std::array<uint8_t, 32> digest;
CallableKind kind;
TargetNamespace target_namespace;
};Python users submit CallableHandle objects returned by Worker.register.
The Python facade validates ownership/liveness and passes CallableIdentity
to C++:
| Context | Namespace | How it's consumed |
|---|---|---|
w3.submit_next_level(handle, …) dispatched to a chip child |
LOCAL_CHIP |
child resolves digest to its private chip slot, then calls ChipWorker::run(local_slot, …) |
w4.submit_next_level(handle, …) dispatched to an L3 Worker child |
LOCAL_PYTHON |
child resolves digest to an orchestration function and calls inner_worker.run(orch_fn, …) |
remote w4.submit_next_level(handle, …) dispatched to remote L3 |
REMOTE_TASK_DISPATCHER |
remote endpoint resolves digest in its dispatcher registry and calls its embedded L3 Worker |
w3.submit_sub(handle, …) dispatched to a SUB child |
LOCAL_PYTHON |
child resolves digest to a Python callable and calls fn(args) |
All three paths share one mailbox wire format: MAILBOX_OFF_CALLABLE is
reserved, and the 32-byte digest prefixes the args blob. The receiving child
does the digest-to-slot resolve in its own address space.
The proposed remote L3 path keeps the same callable identity contract, but
sends it in a versioned TASK frame. The remote endpoint resolves the digest
against its own registry after it has reported HELLO READY.
Pre-start registration is captured in the startup snapshot inherited by child processes. Post-start registration uses the local control plane and completes only after every active target in scope has installed the digest or reported failure. A task is dispatched only after registration succeeds.
Remote L3 cannot rely on fork-time COW inheritance. Remote callable
registration uses explicit descriptors: required PYTHON_IMPORT paths,
optional negotiated PR #839 serialized Python callable payloads, and
CHIP_CALLABLE payloads for inner L3 chip work. A remote callable identity
becomes visible only after the selected endpoint replies success.
The current Python surface implements RemoteCallable("module:qualname") as
the required PYTHON_IMPORT baseline and requires an explicit workers=[...]
list naming remote endpoint ids.
One user-facing class. Its contents appear in four different physical representations across a task's lifetime — these are phases, not hierarchy levels.
class TaskArgs {
std::vector<ContinuousTensor> tensors_;
std::vector<TensorArgType> tags_; // per-tensor: INPUT/OUTPUT/INOUT/OUTPUT_EXISTING/NO_DEP
std::vector<uint64_t> scalars_;
public:
void add_tensor(const ContinuousTensor&, TensorArgType tag = TensorArgType::INPUT);
void add_scalar(uint64_t);
TaskArgsView view() const;
int32_t tensor_count() const;
int32_t scalar_count() const;
TensorArgType tag(int32_t i) const; // only Orchestrator reads tags
};TensorArgType has five values (matches existing tensor_arg.h:53-59):
INPUT, OUTPUT, INOUT, OUTPUT_EXISTING, NO_DEP.
For remote L3 submits, public Python uses RemoteTaskArgs as a wrapper around
the same TaskArgs builder. Each RemoteTensorRef appends a normal
ContinuousTensor metadata entry with data == 0 plus a hidden remote
sidecar at the same tensor index. The local mailbox path rejects non-empty
remote sidecars; the remote framed path encodes the sidecar as a
RemoteTensorDescWire.
| Phase | Form | Backing memory | Who writes | Who reads |
|---|---|---|---|---|
| ① User submit | TaskArgs object (builder) |
Python/C++ parent heap | user orch fn | Orchestrator |
| ② Slot storage | TaskArgs object (inside slot.task_args) |
parent heap | Orchestrator.submit moves it here | WorkerThread at dispatch |
| ③ Dispatch wire (PROCESS only) | length-prefixed blob | shm mailbox (MAP_SHARED) | parent WorkerThread encodes | forked child decodes |
| ④ L2 ABI edge | ChipStorageTaskArgs POD |
child stack | ChipWorker::run assembles |
pto2_run_runtime consumes |
Tags are consumed by Orchestrator::submit_* to derive TensorMap dependencies
and then discarded. Phases ②, ③, ④ do not carry tags — scheduler, worker
thread, child, and runtime.so all ignore per-tensor direction.
offset 0: int32 tensor_count = T
offset 4: int32 scalar_count = S
offset 8: ContinuousTensor tensors[T] // 40 B each
offset 8 + 40T: uint64_t scalars[S] // 8 B each
total used: 8 + 40T + 8S
No tags, no pickle, no schema versioning — pure memcpy.
The parent-side encoder (from TaskArgs::view()) and the child-side
decoder (over the mailbox blob bytes) yield the same view type:
struct TaskArgsView {
int32_t tensor_count;
int32_t scalar_count;
const ContinuousTensor *tensors; // T items
const uint64_t *scalars; // S items
};24 bytes, POD, passable by value. Where the pointed-to arrays live depends on mode:
- THREAD:
tensorspoints into thestd::vector<ContinuousTensor>heap backing insideslot.task_args - PROCESS:
tensorspoints into the shm mailbox blob region
View does not own memory. Valid for the duration of a single
ChipWorker::run call in the forked child.
① TaskArgs (user) — parent heap (vectors)
│
│ Orchestrator::submit_next_level (tags consumed)
▼
② slot.task_args: TaskArgs — parent heap, stored in slot
│
│ LocalMailboxEndpoint::run: memcpy into shm mailbox blob
│ layout = [int32 T][int32 S][ContinuousTensor × T][uint64 × S]
▼
③ shm mailbox bytes (MAP_SHARED) — visible to forked child
│
│ child decodes header → builds TaskArgsView over the blob bytes
▼
child resolves digest -> local slot
ChipWorker::run(local_slot, view, config) (in the forked child)
│ (L2 ABI edge)
▼
④ ChipStorageTaskArgs POD — child stack
│ memcpy view.tensors, view.scalars into struct
▼
pto2_run_runtime(local_slot, &chip_storage, &config)
struct CallConfig {
int32_t block_dim = 0; // 0 = auto (DeviceRunner resolves to stream max at run() time)
int32_t aicpu_thread_num = 3;
int32_t enable_l2_swimlane = 0; // perf_level 0–4 (0=off, 4=full)
int32_t enable_dump_tensor = 0;
int32_t enable_pmu = 0; // 0 = disabled; >0 selects PMU event type
int32_t enable_dep_gen = 0;
int32_t enable_scope_stats = 0;
char output_prefix[1024] = {};
// future fields here - same POD used at all levels
};Propagated by value throughout:
- User builds
CallConfigand passes intosubmit_next_level - Orchestrator stores it inline in
slot.config(POD copy) - Dispatch:
LocalMailboxEndpoint::runmemcpys the slot'sCallConfiginto the shm mailbox - Remote dispatch:
RemoteL3Endpoint::runencodes the fields intoCallConfigWireinstead of memcpying the POD - Child reads
CallConfigfrom mailbox by value, or the remote session runner reconstructs it fromCallConfigWire ChipWorker::runreceivesconst CallConfig&; passed on topto2_run_runtimeat the L2 edge
Same type at every level. Used directly at the L2 runtime ABI.
There is no abstract IWorker interface; dispatch ends in one of two
concrete leaves, each consumed by its own Python child loop.
Wraps a dlsym'd runtime.so. _chip_process_loop instantiates one
ChipWorker per chip child and calls its run on every dispatch.
run() assembles a ChipStorageTaskArgs POD from the decoded view and
calls pto2_run_runtime:
void ChipWorker::run(int32_t local_slot, TaskArgsView view, const CallConfig &config) {
ChipStorageTaskArgs chip_storage;
chip_storage.tensor_count_ = view.tensor_count;
chip_storage.scalar_count_ = view.scalar_count;
memcpy(chip_storage.tensors_, view.tensors, view.tensor_count * sizeof(ContinuousTensor));
memcpy(chip_storage.scalars_, view.scalars, view.scalar_count * sizeof(uint64_t));
pto2_run_runtime(local_slot, &chip_storage, &config);
}One memcpy of a few KB per task; negligible.
SUB execution is handled entirely in Python. The forked child process
runs _sub_worker_loop which reads the args blob from the shared-memory
mailbox, decodes it into a TaskArgs object, and passes it to the
registered callable:
fn(args) # args: TaskArgs decoded from the mailbox blobThe callable receives the same TaskArgs that was submitted via
orch.submit_sub(handle, args), with tags stripped (tags are consumed by
the Orchestrator at submit time). There is no C++ class for SUB workers
— the Python child loop and callable registry are the entire
implementation; the child inherits the Python registry through fork COW.
A higher-level Worker is not itself an execution leaf. When L4
dispatches to an L3 child, the child process runs _child_worker_loop,
which resolves the digest to the registered orch fn and calls
inner_worker.run(orch_fn, args, config) — i.e. the L3 Worker.run
Python method, not a C++ leaf. The kernel-running leaves stay at L2
(ChipWorker); higher levels just compose more scheduling engines. A remote
L3 session runner follows the same execution shape after it has prestarted its
inner L3 Worker, but task/control/completion bytes travel through the remote
framed protocol instead of the local mailbox.
The user's Python orch fn receives an Orchestrator facade (not a Worker)
and calls submit_next_level / submit_sub. These Python methods return
None; the task slot remains internal to the scheduling engine.
class Orchestrator:
def submit_next_level(self, handle, args, config=None, *, worker=-1) -> None: ...
def submit_next_level_group(self, handle, args_list, config=None, *, workers=None) -> None: ...
def submit_sub(self, handle, args=None) -> None: ...
def submit_sub_group(self, handle, args_list) -> None: ...The C++ implementation still allocates an internal task slot to drive scheduling, but nanobind does not expose that slot. Downstream consumers reference tensors by their own pointers (already registered in TensorMap by the OUTPUT/INOUT tag).
Where the data goes after submit:
CallableIdentity— copied intoslot.callable(parent heap)TaskArgs— moved intoslot.task_args(parent heap, vector-backed). Tags are consumed during the same submit call for dep inference and never carried further.CallConfig— copied intoslot.config(parent heap, POD)
For the full submit mechanics (ring alloc, TensorMap lookup/insert, scope ref, fanout wiring), see orchestrator.md.
After the scheduler picks an idle WorkerThread and calls wt->dispatch(sid),
the parent-side WorkerThread encodes (callable digest, CallConfig, TaskArgs)
into the per-WT shm mailbox and the forked child decodes it:
slot.callable.digest ─┐
slot.config ─┼─► memcpy into shm mailbox ─► child resolves digest
slot.task_args ─┘ (dispatch_process) and runs local slot
For SUB children the same mailbox layout is reused; the Python child
runs _sub_worker_loop, which decodes the args blob via
_read_args_from_mailbox into a TaskArgs object and calls
fn(args) directly — no C++ leaf involved.
The mailbox layout, fork ordering, and child loop are in worker-manager.md.
| Region | Lives in | Used by | Lifetime |
|---|---|---|---|
Ring slot-state pool (std::deque<unique_ptr<TaskSlotState>>) |
parent heap | Orchestrator, Scheduler, WorkerThread parent side | monotonic task-id; reset at Worker.run drain |
slot.task_args (single) or task_args_list[N] (group, vector-backed) |
parent heap | same | until slot reaches CONSUMED |
| per-WT mailbox | shm MAP_SHARED | parent WorkerThread writes, child reads | lifetime of WorkerThread |
HeapRing[0..3] (user OUTPUT auto-alloc + orch.alloc) |
4 separate shm MAP_SHARED mmaps, one per scope-layer ring | output to user code; inherited by forked children | per-ring FIFO via rings_[r].last_alive; scope depth picks the ring |
| tensor data bytes (user-provided) | torch shm (share_memory_() or equiv) |
kernel reads/writes | user-managed |
| Registered callables (ChipCallable / orch fn / Python fn) | parent heap | child via fork COW or CTRL_REGISTER IPC |
pre-fork or dynamically registered |
Slot state lives inside Ring as std::deque<std::unique_ptr<…>> so
push_back never invalidates pointers to live slots.
ring.slot_state(id) hands out a stable pointer for every live slot;
drain() calls ring.reset_to_empty() to drop all slot state at the
end of each Worker.run, bounding per-run memory.
The HeapRing is partitioned into MAX_RING_DEPTH = 4 independent
rings (Strict-1; matches L2's PTO2_MAX_RING_DEPTH). Each ring is its
own mmap(MAP_SHARED | MAP_ANONYMOUS) taken before fork, so children
inherit all four at the same virtual addresses. The heap_ring_size
knob on Worker(...) is the per-ring size (default 1 GiB → 4 GiB
total VA reservation); physical pages remain lazy under
MAP_ANONYMOUS. A task's ring is chosen by scope depth,
min(scope_depth, MAX_RING_DEPTH - 1), so inner-scope tasks
reclaim independently of outer-scope tasks. See
orchestrator.md §5 for the allocator internals and
orchestrator.md §6 for the scope → ring mapping.
Child never reads the slot. Child only sees:
- its mailbox (shm)
- parent's pre-fork heap via COW (read-only in practice)
- MAP_SHARED tensor data buffers
When the child finishes the kernel, it writes TASK_DONE to the mailbox;
LocalMailboxEndpoint::run exits its spin-poll, reads the mailbox error
fields, and returns a WorkerCompletion. MAILBOX_OFF_ERROR == 0 maps to
success; a non-zero child error maps to task failure. The parent
WorkerThread pushes that completion onto Scheduler::completion_queue_.
At this point:
- Tensor output data is already written to shm (kernel wrote via
ContinuousTensor.datapointer → shm page visible to parent) - Control returns to the Scheduler, which marks the slot
COMPLETEDon success orFAILEDon task/endpoint failure, then releases fanout refs and either wakes or poisons downstream consumers
For the completion-side mechanics (fanout release, try_consume, ring
release), see scheduler.md §6.
A higher-level Worker registers a lower-level Worker as a
NEXT_LEVEL child via a mailbox just like L3 does for ChipWorker. The
parent side is uniform — WorkerThread calls the endpoint run() contract and
doesn't care what kind of child is on the other end. The local forked
child runs _child_worker_loop, which resolves each dispatched digest and
delegates to
inner_worker.run(...) — i.e. another full scheduling engine inside.
# L3 child: sub-only (no chips for this example)
l3 = Worker(level=3, num_sub_workers=1)
l3_sub_handle = l3.register(lambda: verify_result())
def my_l3_orch(orch, args, config):
orch.submit_sub(l3_sub_handle)
# L4 parent
w4 = Worker(level=4, num_sub_workers=0)
l3_handle = w4.register(my_l3_orch) # register L3 orch fn in Python dict
w4.add_worker(l3) # add un-init'd L3 Worker as child
w4.init()
def my_l4_orch(orch, args, config):
orch.submit_next_level(l3_handle, TaskArgs(), CallConfig())
w4.run(my_l4_orch)
w4.close()At L4 the handle passed to submit_next_level is a LOCAL_PYTHON handle
that maps to a Python orchestration function, not a ChipCallable.
L4's init() allocates the L4 Worker's HeapRing (before fork).
On first run(), the deferred _start_hierarchical():
- Forks one child process per L3 Worker child
- Inside the child:
inner_worker.init()creates the L3 Worker (mmaps L3's own HeapRing), allocates L3's sub/chip mailboxes. L3's own children are forked lazily on L3's firstrun(). - Child enters
_child_worker_loop(mailbox, registry, inner_worker) - Parent: registers each mailbox with L4's Worker via
add_next_level_worker(mailbox_addr)
L4 parent process
├─ Worker(4) + HeapRing (MAP_SHARED, inherited by L3 child)
└─ fork ──────────────────► L3 child process
├─ inner_worker.init()
│ └─ Worker(3) + L3's own HeapRing
└─ _child_worker_loop(mbox, registry, inner_worker)
└─ on first dispatch:
inner_worker.run(orch_fn, args, cfg)
└─ _start_hierarchical() forks L3's sub children
| Step | Where | What happens |
|---|---|---|
| 1 | L4 parent Python | w4.run(my_l4_orch) → scope_begin → my_l4_orch(orch4, ...) |
| 2 | L4 Orchestrator.submit_next_level |
the L3 callable handle digest is stored in the slot's callable identity; slot pushed to L4's ready queue |
| 3 | L4 Scheduler | pop slot; pick idle WorkerThread → the L3 child's mailbox |
| 4 | L4 WorkerThread (PROCESS) | encode (callable digest, config, args_blob) into mailbox; write TASK_READY; spin-poll |
| 5 | L3 child _child_worker_loop |
wake on TASK_READY; read digest → child-local slot → my_l3_orch |
| 6 | L3 child | inner_worker.run(my_l3_orch, args, cfg) → scope_begin → my_l3_orch(orch3, ...) |
| 7 | L3 Orchestrator.submit_sub |
l3_sub_handle digest dispatched to L3's own sub worker child |
| 8 | L3 sub child | child resolves digest to its local Python callable and executes verify_result() |
| 9 | L3 drain | all L3 tasks complete; scope_end + drain return |
| 10 | L3 child | inner_worker.run() returns; _child_worker_loop writes TASK_DONE |
| 11 | L4 LocalMailboxEndpoint | sees TASK_DONE; returns success completion |
| 12 | L4 drain | L4 scope_end + drain; w4.run() returns |
Each level's orch fn receives its own Orchestrator — the recursion is
symmetric. Worker code does not branch on level; the level is only a
diagnostic label.
User code:
a = torch.randn(N).share_memory_()
b = torch.randn(N).share_memory_()
c = torch.zeros(N).share_memory_()
args = TaskArgs()
args.add_tensor(make_ct(a), IN)
args.add_tensor(make_ct(b), IN)
args.add_tensor(make_ct(c), OUT)
def my_orch(orch, view, cfg):
chip_args = TaskArgs()
for i in range(view.tensor_count):
chip_args.add_tensor(view.tensors[i], IN if i < 2 else OUT)
orch.submit_next_level(chip_kernel_handle, chip_args, cfg)
w3 = Worker(level=3, child_mode=PROCESS)
w3.add_worker(NEXT_LEVEL, chip_worker_0)
w3.init() # fork chip_0 here
w3.run(my_orch, args, CallConfig(block_dim=3))Step-by-step (one chip worker):
| Step | Where | What happens |
|---|---|---|
| 1 | parent Python | user builds args: TaskArgs, calls w3.run(my_orch, args, config) |
| 2 | Worker::run |
scope_begin → call my_orch(&orch_, args.view(), cfg) |
| 3 | Orchestrator::submit_next_level |
slot = ring.alloc(); move chip_args into slot.task_args; walk tags → tensormap.lookup(a.data), tensormap.lookup(b.data), tensormap.insert(c.data, slot); push ready |
| 4 | Scheduler thread | pop slot; wt = manager.pick_idle(NEXT_LEVEL) (WT_chip_0); wt->dispatch(slot) |
| 5 | WT_chip_0 parent side | encode mailbox: write reserved callable field, config, digest prefix, write_blob of task_args; set TASK_READY; spin-poll |
| 6 | chip_0 child process | wake on TASK_READY; resolve digest to local slot; read_blob → view; call ChipWorker::run(local_slot, view, cfg) |
| 7 | ChipWorker::run |
assemble ChipStorageTaskArgs POD (memcpy view); call pto2_run_runtime(local_slot, &chip_storage, &cfg) |
| 8 | runtime.so | translate host ptrs → device ptrs; dispatch AICPU / AICore; write output into c's shm |
| 9 | chip_0 child | run returns; write TASK_DONE |
| 10 | WT_chip_0 parent | see TASK_DONE; push success completion |
| 11 | Scheduler | mark slot COMPLETED; fanout release (none in this DAG); scope_end will release scope ref |
| 12 | Worker::run returns |
user's w3.run(...) returns; c contains result in shm, visible to user |
Parent-side task slots need a stable identity that is valid across child
processes even when each target uses a different private execution slot. The
submitted CallableIdentity carries the 32-byte digest plus scheduling
metadata; each child resolves that digest to its own local slot immediately
before execution.
Tags (IN/OUT/INOUT/…) are used by Orchestrator::submit_* to derive TensorMap
dependencies and nothing else. Scheduler, WorkerThread, child, runtime.so, and
kernels do not inspect them. Keeping tags only in Layer ① simplifies the blob
and makes the "tags are Orchestrator input" rule explicit. Matches existing
runtime: ChipStorageTaskArgs (task_args.h:157) is already declared with
void as the TensorTag parameter.
ChipWorker::run takes (local_slot, TaskArgsView, const CallConfig&)
directly. Wrapping them in a struct added no value and made mailbox serialization
indirect. Task identity (slot_id) is held by the parent's WorkerThread
for the completion callback, not passed into the child.
Slots carry scheduler-only state (atomics, mutex, std::vector of fanout
consumers) that is parent-private. Putting them in shm would force cross-
process atomics and shm-safe containers. The only data that needs to cross
the fork boundary is per-task: callable, config, args — and that fits in a
~2 KB mailbox with a one-time memcpy per dispatch.
TaskArgs is vector-backed. Storing an uint8_t args_blob[N] inline in the
slot would cap task size per level and waste memory per slot. Since the slot
is parent-heap, there is no fork-boundary constraint on what it holds — just
store the TaskArgs object and encode it into the mailbox blob at dispatch
time.
View is constructed at both ends of the mailbox handshake (from
TaskArgs::view() on the parent side for encoding, from a decoded
mailbox blob on the child side). Making it POD (24 B) lets it pass by
value through ChipWorker::run. The underlying ContinuousTensor[]
lives in the mailbox blob bytes on the child side — view doesn't care.
- hierarchical_level_runtime.md — L0–L6 level model, three-component composition
- orchestrator.md — how
submit_*actually builds the DAG - scheduler.md — how dispatched slots get worker threads
- worker-manager.md —
WorkerThread, mailbox layout, fork ordering - chip-level-arch.md — L2 single-chip: three-program model (host / AICPU / AICore)
../src/common/task_interface/task_args.h—TaskArgstemplate andChipStorageTaskArgsalias../src/common/task_interface/tensor_arg.h—ContinuousTensorPOD andTensorArgTypeenum