cayu.egress.errors

Public Cayu API. Definitions are grouped by their public source module, and definitions from private implementation modules appear on their package’s page; adding a symbol does not move existing links. The import shown at each entry is a supported public namespace. Read the Python API overview and install the required extra.

`DockerEgressReconnectError`

from cayu.egress import DockerEgressReconnectError

Bounded Docker failure classification with optional safe setup diagnostics.

Bases: EgressReconnectError.

init (method)

DockerEgressReconnectError.__init__(code: str) -> None

Release source · Runtime guarantees · Capability guides

`EgressAuthorityCutoverError`

from cayu.egress import EgressAuthorityCutoverError

A governed egress-authority replacement did not become active.

Bases: EgressError.

This type’s implementation and inherited behavior are available in the linked release source.

Release source · Runtime guarantees · Capability guides

`EgressAuthorityCutoverNeedsAttention`

from cayu.egress import EgressAuthorityCutoverNeedsAttention

A backend cutover mutation was dispatched but activation is unproven.

Bases: EgressAuthorityCutoverError.

init (method)

EgressAuthorityCutoverNeedsAttention.__init__(message: str, *, replacement_binding: Any, environment_fingerprint: str | None, target_authority_installed: bool=True, settlement_task: Any=None, cancellation: asyncio.CancelledError | None=None, cancellation_requests_consumed: int=0) -> None

Release source · Runtime guarantees · Capability guides

`EgressDestinationDeniedError`

from cayu.egress import EgressDestinationDeniedError

An application destination resolver refused to resolve an upstream host.

Raise this from an HttpxUpstream(destination_resolver=...) callable to express a deliberate policy refusal. The broker answers 403 with error_code="destination_denied" and never contacts the upstream, unlike OSError or other resolution failures, which remain 502 dns_failure. reason is returned to the caller and recorded in the egress audit event, so it must not contain secrets. It is normalized to printable single-line text of at most MAX_EGRESS_DESTINATION_DENIED_REASON_CHARS characters.

Bases: EgressError.

init (method)

EgressDestinationDeniedError.__init__(reason: str=_DEFAULT_DESTINATION_DENIED_REASON) -> None

Release source · Runtime guarantees · Capability guides

`EgressError`

from cayu.egress import EgressError

Base error for the virtual egress subsystem.

Bases: RuntimeError.

This type’s implementation and inherited behavior are available in the linked release source.

Release source · Runtime guarantees · Capability guides

`EgressReconnectConflictError`

from cayu.egress import EgressReconnectConflictError

Another owner already holds the reconnectable sandbox boundary.

Bases: EgressReconnectError.

This type’s implementation and inherited behavior are available in the linked release source.

Release source · Runtime guarantees · Capability guides

`EgressReconnectError`

from cayu.egress import EgressReconnectError

Base error for a fail-closed virtual-egress reconnect attempt.

Bases: EgressError.

This type’s implementation and inherited behavior are available in the linked release source.

Release source · Runtime guarantees · Capability guides

`EgressReconnectNotFoundError`

from cayu.egress import EgressReconnectNotFoundError

The sandbox named by durable reconnect metadata no longer exists.

Bases: EgressReconnectError.

This type’s implementation and inherited behavior are available in the linked release source.

Release source · Runtime guarantees · Capability guides

`InvalidEgressReconnectMetadataError`

from cayu.egress import InvalidEgressReconnectMetadataError

Durable reconnect metadata is malformed, stale, or out of scope.

Bases: EgressReconnectError.

This type’s implementation and inherited behavior are available in the linked release source.

Release source · Runtime guarantees · Capability guides

`UnsupportedEgressAuthorityCutoverError`

from cayu.egress import UnsupportedEgressAuthorityCutoverError

The selected adapter cannot safely replace its active egress authority.

Bases: EgressAuthorityCutoverError.

This type’s implementation and inherited behavior are available in the linked release source.

Release source · Runtime guarantees · Capability guides

`UnsupportedEgressCapabilityError`

from cayu.egress import UnsupportedEgressCapabilityError

A named enforcement capability is unavailable for one runner kind.

Bases: UnsupportedEgressError.

init (method)

UnsupportedEgressCapabilityError.__init__(*, runner_kind: str, capability: str, reason: str, remediation: str) -> None

Release source · Runtime guarantees · Capability guides

`UnsupportedEgressError`

from cayu.egress import UnsupportedEgressError

A runner cannot enforce or capture egress for virtual_egress.

This is the fail-closed signal: Cayu must never downgrade virtual_egress to raw secret injection when a runner cannot prove that direct provider egress is blocked or captured. Adapters raise this instead of silently weakening the credential boundary.

Bases: EgressError.

This type’s implementation and inherited behavior are available in the linked release source.

Release source · Runtime guarantees · Capability guides

`UnsupportedEgressReconnectError`

from cayu.egress import UnsupportedEgressReconnectError

The selected adapter cannot safely re-establish enforced egress.

Bases: EgressReconnectError.

This type’s implementation and inherited behavior are available in the linked release source.

Release source · Runtime guarantees · Capability guides

`VirtualCredentialError`

from cayu.egress import VirtualCredentialError

A virtual credential was unknown, expired, or revoked at the broker.

Bases: EgressError.

This type’s implementation and inherited behavior are available in the linked release source.

Release source · Runtime guarantees · Capability guides