morse-ai 0.4.0rc1__tar.gz

morse_ai-0.4.0rc1/.gitignore

@@ -0,0 +1,93 @@
+# OS
+.DS_Store
+Thumbs.db
+*.sw?
+
+# Node / JS / TS
+node_modules/
+.pnpm-store/
+.npm-cache/
+dist/
+build/
+coverage/
+.nyc_output/
+.turbo/
+.next/
+out/
+*.tsbuildinfo
+pnpm-debug.log*
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# Vite/Vitest
+.vite/
+vitest.config.ts.timestamp-*
+
+# Expo / React Native
+.expo/
+.expo-shared/
+ios/
+android/
+
+# Python
+__pycache__/
+*.py[cod]
+*.pyo
+*.pyd
+*.so
+*.egg-info/
+.venv/
+venv/
+env/
+.mypy_cache/
+.pytest_cache/
+.ruff_cache/
+.coverage
+htmlcov/
+*.sqlite3
+coverage.xml
+.hypothesis/
+
+# Django collected static files (built artifact — produced by collectstatic
+# at Docker build time and at runtime; never checked in).
+apps/api/staticfiles/
+
+# Env files
+.env
+.env.local
+.env.*.local
+.env.*
+!.env.example
+!.env.*.example
+
+# GSD / planning backups
+.planning/STATE.md.bak-*
+
+# Test artifacts
+test-results/
+
+# Screen recordings (marketing video build artifacts — scripts/record-video.sh)
+apps/web/recordings/
+
+# Local agent/tool folders
+.agent/
+.agents/
+.codex/
+.gemini/
+.openpackage/
+.aider*
+.claude/worktrees/
+.claude/settings.local.json
+.serena/
+.remember/
+apps/landing/playwright-report/
+# orchestration env (covered by .env.* above, but kept explicit for clarity)
+.env.orchestration
+.env.orchestration.bak
+
+# QA bot run artifacts (machine-generated, high churn, binaries)
+qa/state/
+
+# Local scratch worktrees (never tracked — a stray gitlink was committed 2026-07-25)
+.worktrees/

morse_ai-0.4.0rc1/CHANGELOG.md

@@ -0,0 +1,48 @@
+# Changelog
+
+All notable changes to `morse-ai` are documented here.
+
+The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and
+this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+The Python and TypeScript SDKs version **independently** — they share `0.4.0` as
+their first public release because they reached feature parity there, not
+because they are released in lockstep. Expect the numbers to diverge.
+
+## [0.4.0] — 2026-07-31
+
+First public release on PyPI.
+
+### Added
+
+- **Six framework adapters**, each dogfooded end-to-end against a real
+  third-party application before release: Anthropic Messages API, Claude Agent
+  SDK, OpenAI (raw client), OpenAI Agents SDK, LangChain (LCEL + `bind_tools`),
+  and LangGraph.
+- `input_data` / `output_data` capture on LLM spans for the Anthropic
+  (MHQ-772) and OpenAI (MHQ-774) adapters — prompt and completion payloads are
+  now visible in the trace, subject to the redaction config.
+- OTLP export path alongside the REST transport, including W3C trace-context
+  propagation (`extract_traceparent` / `inject_traceparent`).
+- Retry/backoff on the telemetry transport: 3 attempts with jittered
+  exponential backoff, and quota feedback read from the `X-Morse-Quota-*`
+  response headers.
+
+### Fixed
+
+- Anthropic adapter LLM spans always reported ~0ms duration (MHQ-771).
+- OpenAI adapter LLM spans had the same 0ms duration bug.
+- Claude Agent SDK sub-agent spawns never finalized when the stream ended
+  without a terminal task message — they now finalize via a `ResultMessage`
+  fallback (MHQ-783), and in-flight spawn hooks are drained on shutdown
+  (MHQ-762).
+- API keys are redacted from telemetry under both the current `mhq_` prefix and
+  the legacy `av_` prefix, so keys issued before the rename are still scrubbed.
+
+### Changed
+
+- **The SDK version is now declared in exactly one place** (`pyproject.toml`)
+  and read back from package metadata at import time. It was previously
+  copy-pasted into four locations; the copies could drift from the released
+  version and would then misreport `sdk_version` on every ingested span and in
+  the `User-Agent` header.

morse_ai-0.4.0rc1/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Morse
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

morse_ai-0.4.0rc1/PKG-INFO

@@ -0,0 +1,317 @@
+Metadata-Version: 2.4
+Name: morse-ai
+Version: 0.4.0rc1
+Summary: Unified observability for AI agents and infrastructure. One SDK.
+Project-URL: Homepage, https://morsehq.dev
+Project-URL: Documentation, https://docs.morsehq.dev
+Author-email: Morse <hello@morsehq.dev>
+License-Expression: MIT
+License-File: LICENSE
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Typing :: Typed
+Requires-Python: <4.0,>=3.11
+Requires-Dist: httpx<1.0,>=0.25.0
+Requires-Dist: opentelemetry-exporter-otlp-proto-http>=1.27.0
+Requires-Dist: opentelemetry-sdk>=1.27.0
+Provides-Extra: all
+Requires-Dist: anthropic>=0.40.0; extra == 'all'
+Requires-Dist: langchain-core>=1.0; extra == 'all'
+Requires-Dist: langgraph>=1.0; extra == 'all'
+Requires-Dist: openai-agents<1.0,>=0.15.0; extra == 'all'
+Requires-Dist: openai>=1.50.0; extra == 'all'
+Provides-Extra: anthropic
+Requires-Dist: anthropic>=0.40.0; extra == 'anthropic'
+Provides-Extra: dev
+Requires-Dist: mypy>=1.13; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.24; extra == 'dev'
+Requires-Dist: pytest-benchmark>=5.0; extra == 'dev'
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: respx>=0.22; extra == 'dev'
+Requires-Dist: ruff>=0.8; extra == 'dev'
+Provides-Extra: langchain
+Requires-Dist: langchain-core>=1.0; extra == 'langchain'
+Provides-Extra: langgraph
+Requires-Dist: langchain-core>=1.0; extra == 'langgraph'
+Requires-Dist: langgraph>=1.0; extra == 'langgraph'
+Provides-Extra: openai
+Requires-Dist: openai>=1.50.0; extra == 'openai'
+Provides-Extra: openai-agents
+Requires-Dist: openai-agents<1.0,>=0.15.0; extra == 'openai-agents'
+Description-Content-Type: text/markdown
+
+# Morse Python SDK
+
+Unified observability for AI agents and infrastructure. One SDK.
+
+## Install
+
+```bash
+pip install morse-ai
+```
+
+With an adapter (installs the underlying provider SDK too):
+
+```bash
+pip install "morse-ai[anthropic]"
+pip install "morse-ai[openai]"
+pip install "morse-ai[openai_agents]"
+pip install "morse-ai[langgraph]"     # also pulls langchain-core
+pip install "morse-ai[all]"           # every adapter
+```
+
+The import name is `morse_ai` (underscore) regardless of which extra
+you install — `import morse_ai`.
+
+## Quick Start
+
+```python
+import morse_ai
+
+morse_ai.init(api_key="mhq_xxxxx")  # pragma: allowlist secret
+
+morse_ai.record(
+    agent="lead-qualifier",
+    success=True,
+    outcome="qualified",
+    cost=0.043,
+)
+```
+
+Or trace a multi-step run:
+
+```python
+with morse_ai.run("lead-qualifier") as r:
+    with morse_ai.span("fetch-lead", "tool"):
+        ...
+    r.set_outcome(True, "qualified")
+```
+
+`record()`/`run()`/`span()`/`@trace_agent` all send real OpenTelemetry
+spans over OTLP by default — see [Transport](#transport) below.
+
+## Zero-config instrumentation
+
+```bash
+pip install "morse-ai[anthropic]"
+export MORSE_API_KEY=mhq_xxxxx
+# your existing anthropic / openai-agents / langgraph / claude-agent-sdk
+# code is now traced — no morse_ai.wrap() calls anywhere
+```
+
+When the SDK initializes, it scans `sys.modules` for installed
+provider SDKs — and registers an import hook for ones imported later —
+and calls each detected adapter's `install()`. Today that covers
+`anthropic`, `openai-agents` (imports as `agents`), `langgraph`, and
+`claude-agent-sdk`. Priority rule: when both LangGraph and generic
+LangChain are importable, only the LangGraph adapter installs, to
+avoid duplicate spans. Opt out entirely with
+`MORSE_DISABLE_AUTO_DETECT=1`; you can still call any adapter's
+`install()`/`wrap()` directly.
+
+The plain LangChain adapter (`MorseCallbackHandler`, for chains
+outside a LangGraph graph) is **not** auto-installed — pass it via
+`callbacks=[...]` explicitly (see below).
+
+## Adapters
+
+### Anthropic
+
+```python
+from morse_ai.adapters import anthropic as av_anthropic
+import anthropic
+
+client = av_anthropic.wrap(anthropic.Anthropic())
+# every messages.create call now emits an `llm` span automatically
+response = client.messages.create(
+    model="claude-sonnet-4-6",
+    max_tokens=1024,
+    messages=[{"role": "user", "content": "Qualify this lead..."}],
+)
+```
+
+`wrap()` is idempotent and works whether or not auto-detect already
+installed the adapter globally. Pass `summarize=True` (or use the
+`summarize()` context manager per-call) to also emit a sibling
+`memory` span.
+
+### OpenAI
+
+```python
+from morse_ai.adapters import openai as av_openai
+import openai
+
+client = av_openai.wrap(openai.OpenAI())
+response = client.chat.completions.create(
+    model="gpt-4.1",
+    messages=[{"role": "user", "content": "Qualify this lead..."}],
+)
+```
+
+Context segments (messages + tools) are captured automatically on
+every call — no separate extraction step.
+
+### OpenAI Agents SDK, LangGraph, Claude Agent SDK
+
+These three are auto-installed globally by zero-config detection (see
+above) — no wrap call needed once the package is importable and
+`MORSE_API_KEY` is set. To install manually (e.g. to control ordering,
+or with auto-detect disabled):
+
+```python
+from morse_ai.adapters import openai_agents, langgraph, claude_agent_sdk
+
+openai_agents.install()      # patches agents.Runner.run / run_sync / run_streamed
+langgraph.install()          # registers a callback handler globally with LangChain
+claude_agent_sdk.install()   # patches ClaudeSDKClient.receive_response
+```
+
+Each emits an outer **agent** span, per-call **llm** + **tool** spans,
+and adapter-specific spans (LangGraph: nested chain spans; OpenAI
+Agents: **subagent.spawn**-shaped `handoff` spans; Claude Agent SDK:
+**subagent.spawn** spans for Task-tool fan-out and **hook** spans for
+`pre_tool`/`post_tool`/`on_error`).
+
+### Plain LangChain (chains, LLMs, tools, retrievers)
+
+Not auto-installed — attach `MorseCallbackHandler` via `callbacks`:
+
+```python
+from morse_ai.adapters.langchain import MorseCallbackHandler
+
+handler = MorseCallbackHandler("my-agent")
+chain = SomeChain(..., callbacks=[handler])
+```
+
+Called inside an existing `morse_ai.run()` context, the handler
+appends child spans to that trace. Called standalone (no enclosing
+`run()`), it auto-creates a trace that flushes when the outermost
+chain completes — no `morse_ai.run()` wrapper required.
+
+## Capturing logs alongside agent traces
+
+If you already use stdlib `logging` or `structlog`, you can ship every
+log line to Morse with one line of config. Each record is
+auto-correlated with the active trace (the one entered via
+`morse_ai.run()`, `@morse_ai.trace_agent`, or any active
+`morse_ai.span(...)`) and appears under the trace's **Logs** tab on
+the dashboard.
+
+The shim re-uses the SDK's batched transport — no blocking I/O on your
+hot path.
+
+### Stdlib `logging`
+
+```python
+import logging
+import morse_ai
+from morse_ai.logging import MorseHandler
+
+morse_ai.init(api_key="mhq_xxxxx")  # pragma: allowlist secret
+logging.basicConfig(level=logging.INFO, handlers=[MorseHandler()])
+```
+
+### `structlog`
+
+```python
+import structlog
+import morse_ai
+from morse_ai.logging import structlog_processor
+
+morse_ai.init(api_key="mhq_xxxxx")  # pragma: allowlist secret
+structlog.configure(processors=[structlog_processor, structlog.processors.JSONRenderer()])
+```
+
+Log lines emitted outside any trace context still flow to Morse — they
+just won't be correlated to a specific trace. Errors inside the
+handler / processor are absorbed and never propagate into your
+`logger.info(...)` call.
+
+## Cost
+
+`cost_usd` is computed automatically from the model + token counts on
+every `llm` span the adapters above emit, using a bundled pricing
+table — no separate call needed. `record()` doesn't auto-compute —
+pass `cost` yourself if you have it.
+
+## Transport
+
+`run()`/`span()`/`trace_agent`/`record()` emit real OpenTelemetry spans
+— `TracerProvider` / `BatchSpanProcessor` / `TraceIdRatioBased` sampler
+— over OTLP (protobuf+gzip). This is a **core dependency**
+(`opentelemetry-sdk`, `opentelemetry-exporter-otlp-proto-http`), not an
+optional extra — every install speaks OTLP. `track()`/`batch_track()`
+are a lower-level, non-trace-shaped escape hatch of their own — prefer
+`record()`.
+
+## PII Redaction
+
+The SDK ships with PII redaction **on by default**. Span attributes and
+event payloads are scrubbed inside your process before any data leaves
+for the Morse ingest endpoint. You can opt out per-pattern, opt out
+entirely, or extend the catalogue with your own regex.
+
+### What gets redacted by default
+
+| Pattern key        | Matches                                                                                                                                  | Replacement              |
+| ------------------ | ---------------------------------------------------------------------------------------------------------------------------------------- | ------------------------ |
+| `api_key_prefixed` | `sk-…`, `sk_live_…`, `sk_test_…`, `mhq_…`, GitHub PATs (`ghp_…`/`gho_…`/…), Slack tokens (`xoxb-…`), AWS access keys (`AKIA…`/`ASIA…`/…) | `[REDACTED:api_key]`     |
+| `jwt`              | Three-segment base64url tokens (`eyJ…`)                                                                                                  | `[REDACTED:jwt]`         |
+| `credit_card`      | 13-19 digit groups passing the Luhn checksum                                                                                             | `[REDACTED:credit_card]` |
+| `email`            | RFC-5322-ish address regex                                                                                                               | `[REDACTED:email]`       |
+| `phone_us`         | US-format phone numbers                                                                                                                  | `[REDACTED:phone]`       |
+| `phone_e164`       | International E.164 phone numbers                                                                                                        | `[REDACTED:phone]`       |
+| `ssn_us`           | US Social Security numbers (`999-99-9999`)                                                                                               | `[REDACTED:ssn]`         |
+| `ip_address`       | IPv4 / IPv6 — **disabled by default**, opt-in                                                                                            | `[REDACTED:ip]`          |
+
+### Configuring redaction
+
+```python
+import morse_ai
+
+morse_ai.init(
+    api_key="mhq_xxxxx",  # pragma: allowlist secret
+    # All four kwargs below are optional; defaults are shown.
+    redaction_enabled=True,
+    redaction_disabled_patterns=None,    # e.g. ["email", "phone_us"]
+    redaction_extra_patterns=None,       # e.g. [r"INTERNAL-\w+"]
+)
+```
+
+- `redaction_enabled=False` turns OFF every built-in pattern at the SDK
+  layer. **The server-side mandatory floor still applies** —
+  `api_key_prefixed`, `jwt`, `credit_card`, and `ssn_us` are rewritten
+  on ingest regardless of SDK configuration. Opting out shifts _where_
+  redaction happens, it does not remove it.
+- `redaction_disabled_patterns` lets you skip individual non-mandatory
+  keys (`email`, `phone_us`, `phone_e164`, `ip_address`). Trying to
+  disable a mandatory pattern raises `ValueError` at `init()`.
+- `redaction_extra_patterns` accepts up to 10 customer regex strings
+  (each ≤ 256 chars). Each must compile via `re.compile()`; matches are
+  replaced with `[REDACTED:custom]`. Built-in patterns run before extra
+  patterns, so a custom regex sees the already-redacted text.
+
+### What is NOT touched
+
+Non-string leaves (numbers, booleans, `None`, opaque objects) pass
+through untouched. Span IDs, timestamps, durations, token counts, and
+other metadata are never redacted.
+
+## Docs
+
+Full reference — every adapter, all `init()` options, configuration,
+troubleshooting — lives at **[docs.morsehq.dev](https://docs.morsehq.dev)**.
+This README stays a quickstart.
+
+## Naming
+
+The PyPI project is `morse-ai`; the import name is `morse_ai`
+(Python's underscore convention). The npm package for the TypeScript
+SDK is `@morsehq-dev/sdk` — see that package's README for why it
+doesn't match this one's naming.