Skip to main content

coalex

Python SDK for Coalex — AI governance observability for enterprises in regulated markets.

Built on OpenTelemetry.

Install

pip install coalex
# or
uv add coalex

Quick start

import coalex

coalex.register(api_key=os.environ["COALEX_API_KEY"], service_name="my-agent")
coalex.auto_instrument()

# `version` is the build this agent is running. It is optional today and omitting it warns
# (COA-2636): a trace with no version cannot be attributed to a build, and the dashboard
# records it as `unknown`. It becomes required in coalex 2.0.
with coalex.coalex_context(agent_id="support-agent", version="1.4.0"):
    answer = my_agent.run(question)

decision = coalex.evaluate(
    request_id=request_id,
    input={"question": question},
    output={"answer": answer},
    # The metric catalogue is validated before the call: f1, word_overlap, bleu, rouge_l,
    # exact_match, levenshtein, contains. This line used to read ["faithfulness"], which is not
    # one of them — so the first example a customer copied raised ValueError (COA-2377).
    metrics={"answer": ["f1", "word_overlap"]},
)

Several agents in one process

A context opened inside another agent's context belongs to the inner agent: its spans carry coalex.parent_agent_id (the enclosing agent) and the enclosing request_id / run_id, but not the enclosing agent's version or prompt. coalex.agent_node wraps a LangGraph node function (sync or async) so each node is its own agent, re-opened on every resume, and a LangGraph pause (interrupt()) ends the span OK rather than as an error. current_agent_id(), current_parent_agent_id(), current_request_id(), current_run_id() and current_agent_version() read the active context.

graph.add_node("rfq", coalex.agent_node("rfq-worker", rfq_worker, version="1.4.0"))

with coalex.coalex_context(agent_id="orchestrator", request_id=request_id, run_id=run_id, version="2.0.0"):
    graph.compile(checkpointer=checkpointer).invoke(state, config)

Diagnostics

The SDK logs under the coalex logger and never configures logging for you — a library that calls basicConfig takes over your application's log configuration, which is not its to take. It attaches a NullHandler and leaves the rest to you.

To see what it is doing:

import logging

logging.basicConfig(level=logging.INFO)  # your application's own setup
logging.getLogger("coalex").setLevel(logging.DEBUG)
Logger What you see
coalex.context which agent id a span was attributed to, and where it came from
coalex.auto_instrument which frameworks were instrumented, and which were found but could not be
coalex.safe_exporter span export failures — the first few, then a heartbeat, so a key that breaks mid-run still surfaces
coalex.inventory whether the agent's self-declaration was accepted, and the server's reason if not

Without raising the level you still get warnings and errors — but only through Python's lastResort handler if your application configures none of its own, which prints with no timestamp, level or logger name and cannot be filtered.

No API key, proxy token or upstream credential reaches a log line or an exception message. Raising the level does not change that: it is a property of what is written, not of what is filtered.

Telemetry never breaks your agent

A failing Coalex endpoint drops spans; it does not raise into your code. evaluate() and resolve() do raise, because a governance decision you asked for and did not get is not something to swallow.

TypeScript

There is a TypeScript SDK, and it is smaller. See Python vs TypeScript before choosing.

Documentation

https://docs.coalex.ai

Metadata

Release files for coalex 1.47.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for coalex 1.47.0
File Size Uploaded Provenance Actions
coalex-1.47.0.tar.gz 169.6 kB Without provenance Details for coalex-1.47.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for coalex 1.47.0
File Interpreter ABI Platform Actions
coalex-1.47.0-py3-none-any.whl Python 3 none any Details for coalex-1.47.0-py3-none-any.whl

Total release size: 261.7 kB

Release files / coalex-1.47.0.tar.gz

Download URL coalex-1.47.0.tar.gz
Size 169.6 kB
Tags Source
SHA-256 checksum
How to use checksums
3511dab50068f752c2f74337243fcd03035dd2cb064e3927a3f345635086930e
BLAKE2b-256 checksum
How to use checksums
ba0543db9b5843d7f844e6748fdc0d7a87ad39464ab0420f0fe28c2f60de7fe9
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via uv/0.12.19 {"installer":{"name":"uv","version":"0.12.19","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

Release files / coalex-1.47.0-py3-none-any.whl

Download URL coalex-1.47.0-py3-none-any.whl
Size 92.1 kB
Tags Python 3
SHA-256 checksum
How to use checksums
44ad9764d0dd07e7c97946571333e574ea326875880717ee0bd77c3bc78c30ea
BLAKE2b-256 checksum
How to use checksums
4c5ed353d284ad970501cd32ec7496c1c4673037cf9feaa111d29a8386a8d7b8
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via uv/0.12.19 {"installer":{"name":"uv","version":"0.12.19","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

Security for coalex 1.47.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

1.47.0 This release

2 release files No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page