mlxcel is a Rust inference runtime that calls MLX through a C++ bridge. The
public entry points are intentionally thin: CLI parsing happens at the edge, and
model loading, request preparation, scheduling, and MLX operations live in
focused modules.
src/
├── main.rs # `mlxcel` CLI schema and subcommand routing
├── bin/mlx_server.rs # standalone `mlxcel-server` binary
├── commands/ # CLI subcommand handlers
├── execution/ # runtime/device and sampling helpers
├── model_metadata.rs # model-kind and loading-policy descriptors
├── backend/ # ComputeBackend seam: which engine executes forward()
├── loading/ # model loading routers and family registries
├── loaded_model.rs # LoadedModel enum and LanguageModel dispatch
├── loaded_model_capabilities.rs # multimodal capability routing
├── models/ # text model implementations and detection
├── multimodal/ # shared multimodal prompt/runtime helpers
├── vision/ # vision encoders, processors, connectors
├── audio/ # audio encoder support
├── server/ # HTTP server, request translation, scheduler
├── distributed/ # TP/PP/DI config, transports, registries
├── tokenizer/ # tokenizer loading helpers
├── lora/ # LoRA adapter loading
└── lib/mlxcel-core/ # MLX C++ FFI crate and low-level generation primitives
src/lib/mlxcel-core/ owns the direct MLX bridge and low-level runtime pieces:
src/lib/mlxcel-core/src/lib.rs—cxx::bridgedefinitions and crate exports.src/lib/mlxcel-core/src/cache.rsandsrc/lib/mlxcel-core/src/cache/— FP16/INT8/TurboQuant KV cache variants, paged cache layout, detach/adopt helpers, and cache tests.src/lib/mlxcel-core/src/ops.rs,src/lib/mlxcel-core/src/dtype.rs,src/lib/mlxcel-core/src/streams.rs— wrappers around common MLX operations and runtime concepts.src/lib/mlxcel-core/src/sampling.rs— penalties and token sampling shared by CLI/server paths. Sampler chain order: token bias and penalties, then top-k / top-p / min-p evaluated on the untempered distribution, then XTC on the renormalised filtered row, then one temperature scaling applied only to the final draw (matching the llama-server chain).src/lib/mlxcel-core/src/generate.rs—LanguageModeltrait and generation loops.src/lib/mlxcel-core/src/drafter/andsrc/lib/mlxcel-core/src/speculative/— speculative decoding support.speculative/stochastic_accept.rsholds the acceptance rules and the distribution-preservation guarantee; seespeculative-acceptance.mdfor which rule each path runs.src/lib/mlxcel-core/src/layers.rs,src/lib/mlxcel-core/src/weights.rs,src/lib/mlxcel-core/src/utils.rs— model building blocks, SafeTensors loading, masks, and helper operations.src/lib/mlxcel-core/src/autotune/: shape-bucketed kernel autotuner (issue #906), covering theTunableOpcontract, the interleaved median-of-N profiling harness and its flaky-tactic guard (repetitions scale with measured launch cost; a candidate must beat the default by more than the samples' own dispersion), the persistent tactic cache under${MLXCEL_CACHE_DIR:-$HOME/.cache/mlxcel}/autotune, and the per-op consumers. Off by default and fully inert unlessMLXCEL_AUTOTUNEis set;mlxcel tunedrives it offline.src/lib/mlxcel-core/src/bench_rotation.rs: last-level-cache-aware rotating input buffers for the microbench harnesses underexamples/(see benchmarks).
The in-tree MLX source is under src/lib/mlx-cpp/; src/lib/mlxcel-core/build.rs builds the pinned
MLX commit and compiles the bridge code.
A normal text generation request follows this path:
model path
→ src/models/detection.rs reads config.json and returns ModelType
→ src/model_metadata.rs selects loading policy
→ src/loading/ dispatches to config-backed, non-standard, special, or VLM loader
→ tokenizer is loaded
→ LoadedModel + tokenizer are returned to CLI/server
Important control surfaces:
src/models/detection.rsmapsconfig.json::model_typeand related config hints toModelType.src/model_metadata.rsrecords whether a family is text or VLM, how it is loaded, and whether adapters are supported.src/loading/config_backed.rs,src/loading/nonstandard.rs,src/loading/special.rs, andsrc/loading/vlm*.rscontain the loading implementation.src/loaded_model.rsandsrc/loaded_model_capabilities.rskeep downstream CLI/server code from matching on every concrete model type.src/backend/is the compute-backend seam. CLI and server load sites callselect_backend().load_model(...)rather thanloading::load_modeldirectly, so the engine that runsLanguageModel::forwardis chosen at the load boundary. Under default features the seam folds to the MLX backend at compile time and adds no runtime dispatch; the optionalexperimental-backendfeature reserves a slot for a future non-MLX engine (issue #338).
src/main.rsparses CLI arguments.src/commands/generate.rsprepares prompt/media inputs and sampling options.- The loading pipeline constructs a
LoadedModel. mlxcel-coreruns the decode loop and writes output to stdout.
src/main.rsorsrc/bin/mlx_server.rsparses CLI flags andLLAMA_ARG_*environment-backed options.src/server/startup.rsresolves startup configuration, loads the model, and builds the Axum application.src/server/app.rsmounts routes such as/v1/chat/completions,/v1/completions,/v1/responses,/health, and/v1/models. The OpenAI audio surface is also mounted (both/v1-prefixed and unversioned):/v1/audio/speech(text-to-speech),/v1/audio/transcriptions, and/v1/audio/translations(speech-to-text). These return a structured501 Not Implementeduntil a speech model is wired into the audio-model slot onAppState.- Route handlers translate requests into internal generation work.
src/server/batch/schedules batched decode when enabled.- Streaming responses are emitted as SSE frames.
Release builds use panic = "unwind" (issue #375), so the deliberate audio worker catch_unwind works in production: a synthesis or transcription panic on the audio worker (src/server/audio_worker.rs run_guarded) is contained as a per-request error. The capability-disabled XLA audio preprocessing foundation has the same per-request guard around a future family feature producer, keeping the host worker healthy while XLA audio remains unwired. Every core inference worker thread takes the opposite posture on purpose: run_core_thread_or_abort in src/worker_failfast.rs wraps the batched and legacy server workers (src/server/model_worker.rs) and the remote pipeline stage service thread (src/distributed/pipeline/remote_service.rs) so a panic, which signals a broken invariant, logs and aborts the process for a supervised restart rather than silently unwinding and leaving the server unable to generate. The distributed pipeline stage has no catch_unwind of its own; stage faults are handled at the coordinator by Result propagation plus stage timeout and health probing, which surface a dead or failed stage as a per-request error. There is no global abort panic hook, which would run before unwinding and defeat the audio worker backstop. An MLX C++ FFI exception still becomes std::terminate rather than a Rust panic and terminates the process for any cxx bridge call not wrapped in a fallible try_* boundary (tracked as issue #382). The batch scheduler's decode and prefill eval calls are wrapped this way: a caught throw fails the affected request(s) instead of the process, backstopped by a consecutive-failure guard that shuts the scheduler down cleanly if the backend looks unrecoverable (issue #822). See ADR 0003.
- macOS/Metal and Linux/CUDA behavior is primarily determined by the pinned MLX
build under
src/lib/mlx-cpp/and the feature flags passed to Cargo. - Apple Silicon runtime/device helpers live in
src/lib/mlxcel-core/src/hardware.rsandsrc/execution/runtime.rs. - Custom fused kernel launchers live under
src/lib/mlx-cpp/turbo/and are called through the C++ bridge. Each one carries a Metal JIT source and, where ported, a CUDA counterpart selected at runtime bymlx::core::metal::is_available(): TurboQuant Sparse-V and delegated SDPA, paged-attention decode (v1, plus the v2 cross-CTA split-KV and merge kernels driven fromsrc/lib/mlxcel-core/src/paged_v2/and selected byMLXCEL_PAGED_ATTENTION_V2=1), and Gumbel-max sampling. - CUDA kernel behavior is mostly inherited from MLX;
mlxcelpasses the CUDA architecture list throughMLX_CUDA_ARCHITECTURESat build time.
src/distributed/ contains the shared cluster configuration, transport,
registry, metrics, and scheduler infrastructure used by tensor parallelism,
pipeline parallelism, and disaggregated inference experiments. See
distributed inference for the operator-facing summary.