feat: add payment-aware client runtime

[parvahuja]

Superseded by the reviewable payment-aware stack

This draft has been split into independently testable PRs using GitHub Stacks. Review and merge bottom-up:

1. fix: constrain MCP SDK to supported major #195 — constrain the optional MCP SDK to the compatible 1.x API
2. feat: add shared payment runtime #184 — add the borrowed shared PaymentRuntime
3. feat: share runtime with async HTTP payments #189 — share the runtime with asynchronous HTTP payments and safety policy
4. feat: add owned runtime and synchronous payment transport #190 — add the explicitly owned runtime and synchronous HTTP transport
5. feat: add per-client HTTPX adapters #191 — add explicit per-client HTTPX adapters
6. feat: add process-global HTTPX instrumentation #192 — add process-global HTTPX instrumentation

The retained stack preserves the intended global payment-aware HTTP behavior while keeping each release boundary independently working.

Removed from this stack

• stacked-PR-only CI workflow changes (ci: validate stacked pull requests #188)
• MCP client/runtime instrumentation (feat: share runtime with MCP clients #193)
• speculative successful-response/refetch hooks
• receipt extensions
• thread/executor monkey-patching

The MCP dependency cap in #195 is compatibility-only: a clean optional install otherwise selects MCP 2.x and breaks pympp's existing MCP imports. It adds no MCP runtime behavior.

Verified end state

• feat: add process-global HTTPX instrumentation #192 full suite: 934 passed, 41 skipped; 93.77% coverage
• hosted CI on Python 3.11–3.14
• package, base/Tempo/MCP install smokes, integration tests, and conformance
• HTTPX 0.27.x and 0.28.x adapter matrix
• Ruff, formatting, Pyright, package build, and strict Twine validation
• exact current heads green across the retained stack

Closing this draft so review continues on the smaller PRs above.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/​openai@​2.48.0

View full report