Skip to main content
Pre-release

This release is a pre-release and may not be stable for production use.

wrapture-instrumentation

Instrumentation for common Python packages, applied through wrapture.

wrapture attaches bindings to arbitrary Python call sites without modifying the code being observed, and its config layer can switch on packaged instrumentation for a third-party package by name. This project is the collection of that packaged instrumentation: one wrapture.Instrumentation class per target package (Flask first, more to follow), each registered under the bare target name, so that tracing a framework is one config entry and no code.

Status: pre-alpha. The package is being built target by target against wrapture's alpha series, with development releases published to PyPI. Flask is the first target and covers its basics; see the table below.

Installation

$ pip install wrapture-instrumentation

Installing it brings wrapture and nothing else. No target package is a dependency: the instrumentation for a package you do not have is inert, and wrapture checks the installed version of each target against the range the instrumentation supports at apply time.

Using it

An [[instrument]] entry in wrapture.toml names a target:

[[instrument]]
name = "flask"

[[sink]]
type = "printer"

and the runner applies it before the application starts, so the patches are in place before the framework is imported:

$ python -m wrapture -m myapp

The same config works through autowrapt injection (AUTOWRAPT_BOOTSTRAP=wrapture python myapp.py) and, in a test, through wrapture.instrumentation("flask") scoping the instrumentation to a block. The ad-hoc tracing guide covers the config file itself.

To see what is installed, what each instrumentation supports in the current environment, and what settings it takes:

$ python -m wrapture.tools instrumentation --verbose

and to generate the [[instrument]] entries to paste into a config, every one disabled and every setting commented out at its default:

$ python -m wrapture.tools instrumentation --toml

Provided instrumentation

Target Supported versions Records Settings
flask Flask 3.x Every request as one tree, annotated with route and endpoint; every view observed and labelled by endpoint; template renders beneath their views; handled and unhandled failures noted on the request. ignore_paths, redact, lifecycle, handled_errors, templates
jinja2 Jinja2 3.x Every render traced in all its forms (sync, async, streamed), annotated with the template name; the loading and compile pipeline beneath it; context and output kept out of capture. loading
urllib.request Python 3.12+ (standard library) Every request through urllib.request as one external leaf carrying method, URL, host, port, path, query and status; the trace identity propagated in its headers; the query recorded with secrets masked, the body and response kept out of capture. leaf, propagate, redact
http.client Python 3.12+ (standard library) The wire phases of each exchange (connect where the socket really opens, the request line with its query masked, headers and body out by size, the response wait with its status) as plain events. A debugging aid: beneath an instrumented higher-level client nothing records until that client is switched to leaf = false. redact
xmlrpc.client Python 3.12+ (standard library) Every remote call through a ServerProxy as one external leaf carrying the RPC system and method name, URL, host, port, path and status (a Fault is a 200, a ProtocolError its code); the trace identity propagated in its headers; credentials, arguments, results and bodies kept out of capture. leaf, propagate
xmlrpc.server Python 3.12+ (standard library) Every XML-RPC POST a SimpleXMLRPCServer handles as one server-categorised request boundary carrying method, path, client and status, joining the distributed trace an arriving traceparent header carries; each dispatched procedure beneath it with the method name as operation, multicall sub-calls nested; params and results reduced to counts and types. join
wsgiref.simple_server Python 3.12+ (standard library) Every application the server is handed wrapped in the recording WSGI middleware at the server's own seam: one request tree per request with method, path, redacted query and status, joining the trace a traceparent header carries; an application already recording (a framework's own middleware) still records one boundary per request. ignore_paths, redact
werkzeug.serving werkzeug 3.x Every application handed to werkzeug's development server (Flask's app.run() included) wrapped in the recording WSGI middleware as the server is built: one request tree per request with method, path, redacted query and status, joining the trace a traceparent header carries; a framework's own recording middleware still records one boundary per request. ignore_paths, redact

The entry point name is the config's name; the table summarizes each instrumentation, and the linked per-target README is its full user documentation: what records, what the events carry, the settings, and what is deliberately not traced. Settings, further choke points and wider version ranges are being added target by target.

Adding a target

Each target lives under src/wrapture_instrumentation/ in a role directory named for its category, as <category>/<target>: framework/flask, external/requests, database/sqlite3. The target's own name is its module path with dots as underscores (external/urllib_request for urllib.request, server/xmlrpc_server for xmlrpc.server), and the category says what kind of thing the target is and, with it, which part of wrapture the instrumentation mostly uses:

  • framework/: web frameworks, and their extensions as compound names (framework/flask_restful).

  • external/: outbound HTTP and RPC clients and service SDKs.

  • database/: DB-API drivers and SQL toolkits.

  • datastore/: other stores and caches.

  • task/: task queues. messaging/: brokers and their clients.

  • server/: servers handling inbound requests, WSGI and ASGI servers included.

  • template/: template engines.

A new category is added when a target fits none of these. The role directories are the collection form of the layout: a package instrumenting a single target skips them and uses the flat <category>_<target> name (external_requests), the same words joined by an underscore instead of a directory. Either way the layout is internal; the entry point name, and so the name a config uses, is always the bare target.

The subpackage's __init__.py holds one wrapture.Instrumentation subclass, with one @wrapture.instrumentation_hook method per trigger module, and imports only wrapture; everything that touches the target lives in sibling submodules named for what they patch (app.py for flask.app), themselves importing only wrapture at top level. The class is registered in pyproject.toml under [project.entry-points."wrapture.instrumentation"], and gets its own test suite under tests/<category>/<target>/, mirroring the source layout. Each subpackage also carries a README.md, its user documentation, rendered by GitHub when browsing the directory and linked from the table above; the module docstrings stay the implementation commentary. The instrumentation packages page of the wrapture documentation is the full contract; TESTING.md here covers the tests.

License

BSD-2-Clause, as wrapture.

Release files for wrapture-instrumentation 1.0.0.dev6

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for wrapture-instrumentation 1.0.0.dev6
File Size Uploaded
wrapture_instrumentation-1.0.0.dev6.tar.gz 97.4 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for wrapture-instrumentation 1.0.0.dev6
File Interpreter ABI Platform
wrapture_instrumentation-1.0.0.dev6-py3-none-any.whl Python 3 none any Details

Total release size: 156.7 kB

Release files / wrapture_instrumentation-1.0.0.dev6.tar.gz

Download URL wrapture_instrumentation-1.0.0.dev6.tar.gz
Size 97.4 kB
Tags Source
SHA-256 checksum
How to use checksums
1ef09d291127d259d7dc5652e4ec60d45b6001e3b3573638bbb4d13eafc16758
BLAKE2b-256 checksum
How to use checksums
04e934617c2cc11a628bbb19bbd681e62ee79c75717cc91173466683e554e397
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 2, 2026.

Transparency log

Release files / wrapture_instrumentation-1.0.0.dev6-py3-none-any.whl

Download URL wrapture_instrumentation-1.0.0.dev6-py3-none-any.whl
Size 59.3 kB
Tags Python 3
SHA-256 checksum
How to use checksums
8073b9dd1cb5fb19af6cf6a18fb9b8b7a206ee130fc2b2ff7c0a8bb7909d01b3
BLAKE2b-256 checksum
How to use checksums
517346d25e8c54a251c7945ee5e77617a8524672fc63c4770ecd4321bcab6c76
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 2, 2026.

Transparency log
Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page