cayu 0.2.0.dev0__tar.gz → 0.2.1__tar.gz

{cayu-0.2.0.dev0 → cayu-0.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: cayu
-Version: 0.2.0.dev0
+Version: 0.2.1
 Summary: A Python runtime for production AI agents with durable sessions, controlled tool execution, context management, reviewed knowledge, recovery, evals, and replay.
 Project-URL: Homepage, https://cayu.dev
 Project-URL: Repository, https://github.com/cayu-dev/cayu
@@ -195,6 +195,74 @@ The scaffold is credential-free and includes:
 Open the generated project, describe the requested job in the existing agent,
 and keep its public test/eval seam intact.
 
+### Deploy with Cayu Cloud
+
+Cloud commands ship in the same `cayu` package; no additional CLI package is
+required. Cayu Cloud is currently invite-only. Login-backed commands are pinned to
+the production service at `https://cloud.cayu.dev`; users never select an API URL.
+
+```bash
+cayu cloud --help
+cayu cloud login
+cayu cloud whoami
+cayu cloud init
+cayu cloud deploy
+```
+
+Login uses WorkOS device authorization. It opens the browser when possible and always
+prints a verification URL and one-time user code for SSH, containers, Cursor, Codex,
+and Claude Code. The resulting Organization-scoped session is stored privately and
+refreshed automatically; no WorkOS secret is embedded in Cayu. Use `--no-browser` when
+a human will open the displayed URL on another device. Login selects the WorkOS session
+over any previously persisted private context; a later `cayu cloud context use PATH`
+deliberately switches back to that internal automation context. Private contexts and
+explicit API credentials remain endpoint-bound operator mechanisms and do not change
+the default customer endpoint.
+
+`cayu cloud init` generates the small deployment descriptor from standard
+`pyproject.toml` metadata and a configured Cayu server, worker, or console
+script. Review the generated process topology before deploying it. Existing
+descriptors are never replaced unless `--force` is explicit.
+
+The default command packages the current local working directory and uploads it
+directly to the selected Cayu Cloud Organization as an immutable source bundle.
+It includes an applied patch and does not require GitHub, a clean worktree, a
+commit, or a push. Git-ignored files and common local credential/cache paths are
+omitted.
+
+Deploy creates or updates the 8-63 character application slug declared in
+`cayu-cloud.toml`. Slugs use lowercase letters, numbers, and interior hyphens.
+`--application SLUG` overrides that create-or-update slug; check it carefully because
+a valid typo creates a separate application.
+
+Deploy output and local evidence redact runtime environment values. Cayu verifies the
+evidence destination before Cloud mutation; if only the final evidence write fails after
+a successful rollout, deploy still exits successfully with `evidence_id: null` and an
+`evidence.status: unavailable` diagnostic.
+
+To deploy an exact remote GitHub revision instead, pass its canonical URL and
+40-character commit. For a private source, make authentication available to the
+process that runs Cayu:
+
+```bash
+gh auth status --hostname github.com
+# For noninteractive CI or an isolated Codex/Claude Code home:
+GH_TOKEN="$GITHUB_TOKEN" cayu cloud deploy \
+  https://github.com/example/agent --revision COMMIT_SHA
+```
+
+GitHub CLI credentials stored in a desktop keychain may not be reachable after
+changing `HOME`, even when `GH_CONFIG_DIR` points at an authenticated GitHub CLI
+configuration. In that case, pass a short-lived `GH_TOKEN` explicitly. Cayu
+does not persist the token in its Cloud context or include GitHub CLI stderr in
+its JSON errors. Public GitHub repositories remain deployable without GitHub
+authentication.
+
+For CI and other noninteractive automation, the existing
+`CAYU_CLOUD_API_KEY`, `CAYU_CLOUD_API_KEY_FILE`, and private Cloud-context
+options remain available. Explicit automation credentials take precedence over
+the saved interactive login.
+
 ### Run an agent
 
 This compact example shows the core API. Real projects should put the same

{cayu-0.2.0.dev0 → cayu-0.2.1}/README.md

@@ -105,6 +105,74 @@ The scaffold is credential-free and includes:
 Open the generated project, describe the requested job in the existing agent,
 and keep its public test/eval seam intact.
 
+### Deploy with Cayu Cloud
+
+Cloud commands ship in the same `cayu` package; no additional CLI package is
+required. Cayu Cloud is currently invite-only. Login-backed commands are pinned to
+the production service at `https://cloud.cayu.dev`; users never select an API URL.
+
+```bash
+cayu cloud --help
+cayu cloud login
+cayu cloud whoami
+cayu cloud init
+cayu cloud deploy
+```
+
+Login uses WorkOS device authorization. It opens the browser when possible and always
+prints a verification URL and one-time user code for SSH, containers, Cursor, Codex,
+and Claude Code. The resulting Organization-scoped session is stored privately and
+refreshed automatically; no WorkOS secret is embedded in Cayu. Use `--no-browser` when
+a human will open the displayed URL on another device. Login selects the WorkOS session
+over any previously persisted private context; a later `cayu cloud context use PATH`
+deliberately switches back to that internal automation context. Private contexts and
+explicit API credentials remain endpoint-bound operator mechanisms and do not change
+the default customer endpoint.
+
+`cayu cloud init` generates the small deployment descriptor from standard
+`pyproject.toml` metadata and a configured Cayu server, worker, or console
+script. Review the generated process topology before deploying it. Existing
+descriptors are never replaced unless `--force` is explicit.
+
+The default command packages the current local working directory and uploads it
+directly to the selected Cayu Cloud Organization as an immutable source bundle.
+It includes an applied patch and does not require GitHub, a clean worktree, a
+commit, or a push. Git-ignored files and common local credential/cache paths are
+omitted.
+
+Deploy creates or updates the 8-63 character application slug declared in
+`cayu-cloud.toml`. Slugs use lowercase letters, numbers, and interior hyphens.
+`--application SLUG` overrides that create-or-update slug; check it carefully because
+a valid typo creates a separate application.
+
+Deploy output and local evidence redact runtime environment values. Cayu verifies the
+evidence destination before Cloud mutation; if only the final evidence write fails after
+a successful rollout, deploy still exits successfully with `evidence_id: null` and an
+`evidence.status: unavailable` diagnostic.
+
+To deploy an exact remote GitHub revision instead, pass its canonical URL and
+40-character commit. For a private source, make authentication available to the
+process that runs Cayu:
+
+```bash
+gh auth status --hostname github.com
+# For noninteractive CI or an isolated Codex/Claude Code home:
+GH_TOKEN="$GITHUB_TOKEN" cayu cloud deploy \
+  https://github.com/example/agent --revision COMMIT_SHA
+```
+
+GitHub CLI credentials stored in a desktop keychain may not be reachable after
+changing `HOME`, even when `GH_CONFIG_DIR` points at an authenticated GitHub CLI
+configuration. In that case, pass a short-lived `GH_TOKEN` explicitly. Cayu
+does not persist the token in its Cloud context or include GitHub CLI stderr in
+its JSON errors. Public GitHub repositories remain deployable without GitHub
+authentication.
+
+For CI and other noninteractive automation, the existing
+`CAYU_CLOUD_API_KEY`, `CAYU_CLOUD_API_KEY_FILE`, and private Cloud-context
+options remain available. Explicit automation credentials take precedence over
+the saved interactive login.
+
 ### Run an agent
 
 This compact example shows the core API. Real projects should put the same

{cayu-0.2.0.dev0 → cayu-0.2.1}/examples/aws/lambda_microvm_sidecar/cayu-lambda-microvm-sidecar-manifest.json

@@ -1,6 +1,6 @@
 {
   "artifact_version": 1,
-  "cayu_version": "0.2.0.dev0",
+  "cayu_version": "0.2.1",
   "content_digest": "sha256:dcc58874676599799294540b371c2a059a7e8ba41b041b1498139167668e5391",
   "files": [
     {

{cayu-0.2.0.dev0 → cayu-0.2.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "cayu"
-version = "0.2.0.dev0"
+version = "0.2.1"
 description = "A Python runtime for production AI agents with durable sessions, controlled tool execution, context management, reviewed knowledge, recovery, evals, and replay."
 readme = "README.md"
 requires-python = ">=3.11"

{cayu-0.2.0.dev0 → cayu-0.2.1}/src/cayu/__init__.py

@@ -107,6 +107,7 @@ from cayu.environments import (
     S3FilesAccessPointBinding,
     SyncBinding,
     SyncBindingContext,
+    SyncTargetWorkspacePlan,
     WorkspaceBinding,
     WorkspaceInstructions,
     WorkspaceInstructionsConfig,
@@ -367,23 +368,31 @@ from cayu.mcp import (
     DEFAULT_MCP_GRACEFUL_SHUTDOWN_TIMEOUT_S,
     DEFAULT_MCP_MAX_LIST_ITEMS,
     DEFAULT_MCP_MAX_LIST_PAGES,
+    DEFAULT_MCP_MAX_MESSAGE_BYTES,
+    DEFAULT_MCP_MAX_RESPONSE_BYTES,
     DEFAULT_MCP_REQUEST_TIMEOUT_S,
     DEFAULT_MCP_WRITE_TIMEOUT_S,
     MCP_PROTOCOL_VERSION,
     SUPPORTED_MCP_PROTOCOL_VERSIONS,
     HttpMcpClient,
     HttpMcpSession,
+    McpCallDeadlineExceededError,
     McpClient,
+    McpIdleTimeoutError,
     McpInitializeResult,
+    McpMessageTooLargeError,
+    McpPeerClosedError,
     McpProtocolError,
     McpResourceDefinition,
     McpResourceResult,
+    McpResponseTooLargeError,
     McpServerSpec,
     McpSession,
     McpToolAdapter,
     McpToolDefinition,
     McpToolResult,
     McpToolset,
+    McpTransportLimits,
     StdioMcpClient,
     StdioMcpSession,
     connect_mcp_toolset,
@@ -489,6 +498,8 @@ from cayu.runtime import (
     DEFAULT_TOOL_RESULT_MAX_INLINE_BYTES,
     DEFAULT_TOOL_RESULT_MAX_INLINE_TOKEN_ESTIMATE,
     DEFAULT_TOOL_RESULT_PREVIEW_BYTES,
+    EXECUTION_PROFILE_METADATA_KEY,
+    EXECUTION_PROFILE_SCHEMA_VERSION,
     INITIAL_TRANSCRIPT_PENDING_CHECKPOINT_KEY,
     MAX_INCOMPLETE_SESSIONS_RECOVERY_CURSOR_BYTES,
     MAX_PENDING_ACTION_RESULT_BYTES,
@@ -612,6 +623,24 @@ from cayu.runtime import (
     EventWatcherRunResult,
     EventWatcherState,
     EventWatcherStore,
+    ExecutionProfileAdoptionIntent,
+    ExecutionProfileAdoptionRejected,
+    ExecutionProfileAuthorityDecision,
+    ExecutionProfileComponentClass,
+    ExecutionProfileComponentIdentity,
+    ExecutionProfileDecision,
+    ExecutionProfileDecisionKind,
+    ExecutionProfileIdentity,
+    ExecutionProfileIdentityAvailability,
+    ExecutionProfileIdentityStrength,
+    ExecutionProfileMigrationRequired,
+    ExecutionProfileMismatchError,
+    ExecutionProfilePolicy,
+    ExecutionProfilePolicyAction,
+    ExecutionProfilePolicyError,
+    ExecutionProfilePolicyRequest,
+    ExecutionProfilePolicyResult,
+    ExecutionProfileRejectionResult,
     ForkSessionRequest,
     IncompleteSessionRecoveryAction,
     IncompleteSessionRecoveryRequest,
@@ -627,8 +656,13 @@ from cayu.runtime import (
     InteractionLifecyclePublicationRejected,
     InteractionStatus,
     InteractionSummaryEvidence,
+    InteractionTransitionReceiptResult,
     InteractionTransitionResult,
+    InteractionTransitionSpec,
     InterruptSessionRequest,
+    InvocationOrigin,
+    InvocationOriginClaim,
+    InvocationOriginTrust,
     KnowledgeInjectionPolicy,
     LabelSelectorOperator,
     LabelSelectorRequirement,
@@ -649,6 +683,7 @@ from cayu.runtime import (
     ModelPrice,
     ModelStepCostEstimate,
     ModelStepIdentity,
+    ModelTarget,
     NativeStructuredOutputUnsupported,
     ObservedDeltaContextEstimator,
     ParameterConstrainedToolPolicy,
@@ -725,10 +760,12 @@ from cayu.runtime import (
     SessionBudgetInspection,
     SessionBudgetStore,
     SessionCostSummary,
+    SessionExecutionSource,
     SessionIdentity,
     SessionInspectionIdentity,
     SessionInspectionSummary,
     SessionInspectionUsageSummary,
+    SessionInvocation,
     SessionLineageNode,
     SessionLineageOrigin,
     SessionLineageQuery,
@@ -737,6 +774,7 @@ from cayu.runtime import (
     SessionMessageDeliveryBatch,
     SessionMessageDeliveryMode,
     SessionMessageQueueStatus,
+    SessionModelTransition,
     SessionOperationalSnapshot,
     SessionOrder,
     SessionOutcome,
@@ -815,6 +853,7 @@ from cayu.runtime import (
     TranscriptPage,
     TranscriptQuery,
     TranscriptRecord,
+    TranscriptSnapshot,
     UnresolvedBillingIdentity,
     UsageAggregateBreakdown,
     UsageAggregateGroup,
@@ -893,6 +932,7 @@ from cayu.runtime import (
     retry_decision,
     run_task_worker,
     run_to_completion,
+    session_invocation_for_run_request,
     session_usage_summary,
     strip_old_file_attachments,
     taint_labels_from_metadata,
@@ -924,6 +964,8 @@ from cayu.storage import (
     KnowledgeListItem,
     KnowledgeListQuery,
     KnowledgeListResult,
+    KnowledgePublicationConflict,
+    KnowledgePublicationReceipt,
     KnowledgeQuery,
     KnowledgeReviewWorkflow,
     KnowledgeSearchMode,
@@ -937,6 +979,7 @@ from cayu.storage import (
     SQLiteKnowledgeStore,
     SQLiteSessionStore,
     SQLiteTaskStore,
+    prepare_knowledge_publication,
 )
 from cayu.tools import (
     ArtifactReader,
@@ -1098,6 +1141,8 @@ __all__ = [
     "DEFAULT_MCP_GRACEFUL_SHUTDOWN_TIMEOUT_S",
     "DEFAULT_MCP_MAX_LIST_ITEMS",
     "DEFAULT_MCP_MAX_LIST_PAGES",
+    "DEFAULT_MCP_MAX_MESSAGE_BYTES",
+    "DEFAULT_MCP_MAX_RESPONSE_BYTES",
     "DEFAULT_MCP_REQUEST_TIMEOUT_S",
     "DEFAULT_MCP_WRITE_TIMEOUT_S",
     "DEFAULT_MICROSANDBOX_CWD",
@@ -1144,6 +1189,8 @@ __all__ = [
     "EVENT_ID_MAX_CHARS",
     "EXECUTION_CAPABILITY_EVIDENCE_SCHEMA",
     "EXECUTION_LIVE_EVIDENCE_MAX_TTL_SECONDS",
+    "EXECUTION_PROFILE_METADATA_KEY",
+    "EXECUTION_PROFILE_SCHEMA_VERSION",
     "FILE_ATTACHMENT_TYPE",
     "INITIAL_TRANSCRIPT_PENDING_CHECKPOINT_KEY",
     "MAX_INCOMPLETE_SESSIONS_RECOVERY_CURSOR_BYTES",
@@ -1432,6 +1479,24 @@ __all__ = [
     "ExecutionCapabilityClaim",
     "ExecutionCapabilityEvidence",
     "ExecutionEvidenceOverride",
+    "ExecutionProfileAdoptionIntent",
+    "ExecutionProfileAdoptionRejected",
+    "ExecutionProfileAuthorityDecision",
+    "ExecutionProfileComponentClass",
+    "ExecutionProfileComponentIdentity",
+    "ExecutionProfileDecision",
+    "ExecutionProfileDecisionKind",
+    "ExecutionProfileIdentity",
+    "ExecutionProfileIdentityAvailability",
+    "ExecutionProfileIdentityStrength",
+    "ExecutionProfileMigrationRequired",
+    "ExecutionProfileMismatchError",
+    "ExecutionProfilePolicy",
+    "ExecutionProfilePolicyAction",
+    "ExecutionProfilePolicyError",
+    "ExecutionProfilePolicyRequest",
+    "ExecutionProfilePolicyResult",
+    "ExecutionProfileRejectionResult",
     "ExecutionRequirements",
     "FileAttachment",
     "FileAttachmentKind",
@@ -1469,9 +1534,14 @@ __all__ = [
     "InteractionLifecyclePublicationRejected",
     "InteractionStatus",
     "InteractionSummaryEvidence",
+    "InteractionTransitionReceiptResult",
     "InteractionTransitionResult",
+    "InteractionTransitionSpec",
     "InterruptSessionRequest",
     "InvalidArtifactIdError",
+    "InvocationOrigin",
+    "InvocationOriginClaim",
+    "InvocationOriginTrust",
     "KnowledgeActorType",
     "KnowledgeChunk",
     "KnowledgeEntry",
@@ -1485,6 +1555,8 @@ __all__ = [
     "KnowledgeListItem",
     "KnowledgeListQuery",
     "KnowledgeListResult",
+    "KnowledgePublicationConflict",
+    "KnowledgePublicationReceipt",
     "KnowledgeQuery",
     "KnowledgeReviewWorkflow",
     "KnowledgeSearchMode",
@@ -1515,7 +1587,9 @@ __all__ = [
     "MaxToolCallsAssertionSpec",
     "MaxTotalTokens",
     "MaxTotalTokensAssertionSpec",
+    "McpCallDeadlineExceededError",
     "McpClient",
+    "McpIdleTimeoutError",
     "McpInitializeResult",
     "McpManifestBaseline",
     "McpManifestBaselineLoadResult",
@@ -1525,15 +1599,19 @@ __all__ = [
     "McpManifestPolicyDecision",
     "McpManifestPolicyError",
     "McpManifestPublicationResult",
+    "McpMessageTooLargeError",
+    "McpPeerClosedError",
     "McpProtocolError",
     "McpResourceDefinition",
     "McpResourceResult",
+    "McpResponseTooLargeError",
     "McpServerSpec",
     "McpSession",
     "McpToolAdapter",
     "McpToolDefinition",
     "McpToolResult",
     "McpToolset",
+    "McpTransportLimits",
     "Message",
     "MessageRole",
     "MessageWindowContextPolicy",
@@ -1558,6 +1636,7 @@ __all__ = [
     "ModelStepCostEstimate",
     "ModelStepIdentity",
     "ModelStreamEvent",
+    "ModelTarget",
     "NativeBinding",
     "NativeStructuredOutputSchemaInvalid",
     "NativeStructuredOutputUnsupported",
@@ -1725,12 +1804,14 @@ __all__ = [
     "SessionBudgetStore",
     "SessionCompleted",
     "SessionCostSummary",
+    "SessionExecutionSource",
     "SessionFailed",
     "SessionIdentity",
     "SessionInspectionIdentity",
     "SessionInspectionSummary",
     "SessionInspectionUsageSummary",
     "SessionInterrupted",
+    "SessionInvocation",
     "SessionLineageNode",
     "SessionLineageOrigin",
     "SessionLineageQuery",
@@ -1739,6 +1820,7 @@ __all__ = [
     "SessionMessageDeliveryBatch",
     "SessionMessageDeliveryMode",
     "SessionMessageQueueStatus",
+    "SessionModelTransition",
     "SessionOperationalSnapshot",
     "SessionOrder",
     "SessionOutcome",
@@ -1786,6 +1868,7 @@ __all__ = [
     "SubagentTool",
     "SyncBinding",
     "SyncBindingContext",
+    "SyncTargetWorkspacePlan",
     "TaintAwareToolPolicy",
     "TarWriter",
     "Task",
@@ -1864,6 +1947,7 @@ __all__ = [
     "TranscriptPage",
     "TranscriptQuery",
     "TranscriptRecord",
+    "TranscriptSnapshot",
     "TrialRequestSpec",
     "UnresolvedBillingIdentity",
     "UsageAggregateBreakdown",
@@ -2023,6 +2107,7 @@ __all__ = [
     "parallel",
     "parse_public_authority_alias",
     "pipeline",
+    "prepare_knowledge_publication",
     "pricing_profile_identity",
     "project_assertion_evidence_view",
     "promotable_run_input",
@@ -2047,6 +2132,7 @@ __all__ = [
     "score_promotion_candidate",
     "scripted_structured_output",
     "secret_env_refs",
+    "session_invocation_for_run_request",
     "session_usage_summary",
     "step",
     "strip_old_file_attachments",

cayu-0.2.1/src/cayu/_clock.py

@@ -0,0 +1,24 @@
+from __future__ import annotations
+
+from collections.abc import Callable
+from datetime import UTC, datetime
+
+
+def normalize_utc_datetime(value: datetime, field_name: str) -> datetime:
+    if not isinstance(value, datetime):
+        raise TypeError(f"{field_name} must be a datetime.")
+    if value.tzinfo is None or value.utcoffset() is None:
+        raise ValueError(f"{field_name} must be timezone-aware.")
+    return value.astimezone(UTC)
+
+
+def utc_clock(clock: Callable[[], datetime] | None) -> Callable[[], datetime]:
+    if clock is None:
+        return lambda: datetime.now(UTC)
+    if not callable(clock):
+        raise TypeError("clock must be callable.")
+
+    def checked_clock() -> datetime:
+        return normalize_utc_datetime(clock(), "clock()")
+
+    return checked_clock

{cayu-0.2.0.dev0 → cayu-0.2.1}/src/cayu/_server_contract_version.py

@@ -1,3 +1,3 @@
 """Dependency-light control-plane contract identity."""
 
-SERVER_CONTRACT_VERSION = "9"
+SERVER_CONTRACT_VERSION = "10"

{cayu-0.2.0.dev0 → cayu-0.2.1}/src/cayu/_validation.py

@@ -27,6 +27,67 @@ MIN_DURABLE_JSON_INTEGER = -(2**63)
 MAX_DURABLE_JSON_INTEGER = 2**63 - 1
 MAX_DURABLE_JSON_NESTING = 128
 
+
+def revalidate_model_input(value: Any, *model_types: type[BaseModel]) -> Any:
+    """Reconstruct an already-validated model while leaving raw input unchanged.
+
+    Pydantic normally accepts a model instance for a nested field by reference.
+    Public snapshot contracts use this helper in ``mode="before"`` validators
+    so caller-owned instances are detached and revalidated just like raw
+    mappings. Private model attributes are intentionally not preserved; values
+    whose runtime provenance is part of their contract need a dedicated copier.
+    """
+
+    for model_type in model_types:
+        if isinstance(value, model_type):
+            return model_type.model_validate(_model_instance_python_input(value))
+    return value
+
+
+def revalidate_model_inputs(value: Any, *model_types: type[BaseModel]) -> Any:
+    """Reconstruct validated models inside one iterable field input."""
+
+    if (
+        value is None
+        or isinstance(value, (str, bytes, bytearray, Mapping, BaseModel))
+        or not isinstance(value, Iterable)
+    ):
+        return value
+    return tuple(revalidate_model_input(item, *model_types) for item in value)
+
+
+def _model_instance_python_input(value: BaseModel) -> dict[str, Any]:
+    """Dump a model for validation without dropping excluded nested fields."""
+
+    nested_fields: dict[str, Any] = {}
+    for field_name, field_info in type(value).model_fields.items():
+        field_value = getattr(value, field_name)
+        if field_info.exclude or isinstance(field_value, (BaseModel, Mapping, list, tuple)):
+            nested_fields[field_name] = field_value
+    document = value.model_dump(
+        mode="python",
+        warnings=False,
+        exclude=set(nested_fields),
+    )
+    for field_name, field_value in nested_fields.items():
+        document[field_name] = (
+            dict(field_value)
+            if isinstance(field_value, Mapping)
+            else _nested_model_python_input(field_value)
+        )
+    return document
+
+
+def _nested_model_python_input(value: Any) -> Any:
+    if isinstance(value, BaseModel):
+        return _model_instance_python_input(value)
+    if isinstance(value, list):
+        return [_nested_model_python_input(item) for item in value]
+    if isinstance(value, tuple):
+        return tuple(_nested_model_python_input(item) for item in value)
+    return value
+
+
 _MAX_DURABLE_ERROR_FIELD_CHARS = 128
 _MAX_DURABLE_ERROR_PATH_CHARS = 512
 _DURABLE_ERROR_MESSAGES = {
@@ -567,7 +628,15 @@ class JsonUtf8SizeCounter:
         if isinstance(value, date):
             return self._string(value.isoformat())
         if type(value) in {int, float}:
-            return self._consume(len(str(value).encode("utf-8")))
+            try:
+                rendered = str(value)
+            except (OverflowError, ValueError):
+                # CPython bounds decimal conversion of very large integers. A
+                # size preflight must fail closed instead of leaking that raw
+                # interpreter error past a caller expecting a bounded result.
+                self.encountered_unsupported_value = True
+                return False
+            return self._consume(len(rendered.encode("utf-8")))
         if isinstance(value, BaseModel):
             fields = type(value).model_fields
             if not self._consume(2):

{cayu-0.2.0.dev0 → cayu-0.2.1}/src/cayu/_version.py

@@ -9,7 +9,7 @@ def package_version() -> str:
     try:
         return version("cayu")
     except PackageNotFoundError:
-        return "0.2.0.dev0"
+        return "0.2.1"
 
 
 __version__ = package_version()

{cayu-0.2.0.dev0 → cayu-0.2.1}/src/cayu/artifacts/aws_s3.py

@@ -343,6 +343,8 @@ class S3ArtifactStore(ArtifactStore):
         )
         try:
             await asyncio.to_thread(self._delete_keys, client, keys)
+        except ArtifactStoreUnavailableError:
+            raise
         except Exception as exc:
             raise ArtifactStoreUnavailableError(
                 "S3 artifact store could not delete artifact content."
@@ -433,10 +435,34 @@ class S3ArtifactStore(ArtifactStore):
             return
 
     def _delete_keys(self, client: Any, keys: tuple[str, ...]) -> None:
-        client.delete_objects(
+        response = client.delete_objects(
             Bucket=self.bucket,
             Delete={"Objects": [{"Key": key} for key in keys], "Quiet": True},
         )
+        if not isinstance(response, Mapping):
+            raise ArtifactStoreUnavailableError("S3 DeleteObjects returned an invalid response.")
+        errors = response.get("Errors")
+        if errors is None or errors == []:
+            return
+        if not isinstance(errors, Sequence) or isinstance(errors, (str, bytes, bytearray)):
+            raise ArtifactStoreUnavailableError(
+                "S3 DeleteObjects returned an invalid per-object error collection."
+            )
+        safe_codes: list[str] = []
+        for error in errors[:3]:
+            code = error.get("Code") if isinstance(error, Mapping) else None
+            safe_code = (
+                code
+                if type(code) is str and re.fullmatch(r"[A-Za-z0-9._-]{1,64}", code)
+                else "Unknown"
+            )
+            if safe_code not in safe_codes:
+                safe_codes.append(safe_code)
+        error_label = "error" if len(errors) == 1 else "errors"
+        raise ArtifactStoreUnavailableError(
+            f"S3 DeleteObjects returned {len(errors)} per-object {error_label} "
+            f"(codes: {', '.join(safe_codes)})."
+        )
 
     async def _get_client(self) -> Any:
         if self._client is not None:

{cayu-0.2.0.dev0 → cayu-0.2.1}/src/cayu/cli/__init__.py

@@ -1,6 +1,7 @@
 from __future__ import annotations
 
 import argparse
+import sys
 from collections.abc import Callable
 
 from cayu._version import package_version
@@ -81,9 +82,14 @@ def _build_parser() -> argparse.ArgumentParser:
 
 
 def main(argv: list[str] | None = None) -> int:
-    parser = _build_parser()
+    arguments = sys.argv[1:] if argv is None else argv
+    if arguments and arguments[0] == "cloud":
+        from cayu.cli.cloud import run_cloud_cli
+
+        return run_cloud_cli(arguments[1:])
 
-    args = parser.parse_args(argv)
+    parser = _build_parser()
+    args = parser.parse_args(arguments)
     runner = getattr(args, "_runner", None)
     if runner is not None:
         return runner(args)