AnyCloud Python SDK

Submit Jobs, run persistent Workers, and manage your cloud resources with AnyCloud. Python 3.10 or newer is required. One anycloud-sdk installation provides anycloud and anycloud_workflows.

Install and configure

pip install anycloud-sdk

Follow Getting Started to start or select an API, log in, and save a cloud credential. Client() reuses the CLI's API target and authentication:

from anycloud import Client

with Client() as client:
    print(client.sdk_version)

The API URL comes from an explicit api_url=, then API_URL, then $ANYCLOUD_DIR/api-url (default ~/.anycloud/api-url), falling back to http://localhost:8080. Authentication comes from an explicit token=, then $ANYCLOUD_DIR/.token, ANYCLOUD_TOKEN, or GITHUB_TOKEN. Explicit arguments always win. The context manager closes the client's connections.

API authentication does not select a cloud compute credential. Pass a saved credential with credential_name= on each image-based submission.

Submit a dedicated Job

Publish an image containing your code and dependencies. Select its command with a list of arguments; use an immutable tag or digest when reproducibility matters:

from anycloud import Client

with Client() as client:
    job = client.submit(
        "ghcr.io/acme/trainer:git-a1b2c3d",
        credential_name="aws-prod",
        gpu="h100:8",
        cloud_config={"region": "us-east-1", "spot": True},
        env={"LR": "0.01"},
        command=["python", "-m", "training"],
    )
    print(job.id, job.status().deployment.state)
    job.wait(timeout_seconds=3600)
    print(job.last_status.deployment.state)

submit() returns a Job handle. Use status() to fetch current state, wait() to wait for successful completion, and terminate() to request termination. Keep the owning Client open while using its handles.

Chain Jobs with shared storage

Wait for one Job before submitting its dependent Job. Attach bucket names through cloud_config to pass data between workloads:

from anycloud import Client

with Client() as client:
    prep = client.submit(
        "ghcr.io/acme/prep:latest",
        credential_name="aws-prod",
        gpu="h100",
        cloud_config={"output_bucket": "prepared-data"},
    )
    prep.wait()

    train = client.submit(
        "ghcr.io/acme/trainer:latest",
        credential_name="aws-prod",
        gpu="h100:8",
        cloud_config={
            "input_bucket": "prepared-data",
            "output_bucket": "trained-models",
        },
    )
    train.wait()

The first image writes /mnt/output; the next reads /mnt/input. Input buckets must already exist, and output buckets can be created by the API. A Job's input and output bucket names must differ. Use separate buckets or application-managed output prefixes for concurrent workflows. See Buckets for checkpoint storage and sync guarantees.

Submit to an existing Worker

A Worker supplies the container, credentials, and compute settings. Submit its name or ID and, optionally, your own Job ID:

from anycloud import Client

with Client() as client:
    job = client.submit(worker="model-workers", deployment_id="request-123")
    status = job.status()
    state = status.deployment.state

    if state in {"completed", "errored", "failed", "invalid", "terminated"}:
        print("Job finished:", state)
    elif state == "running":
        print("Worker picked up the Job")
    elif state == "queued":
        if status.jobs_ahead is None:
            print("Queue position is unavailable")
        elif status.jobs_ahead == 0:
            print("First in the queue; waiting for pickup")
        else:
            print("Jobs ahead:", status.jobs_ahead)

        worker = client.get_worker("model-workers")
        workload = worker.workload
        if worker.deletion_requested_at is not None or worker.deleted_at is not None:
            print("Worker is draining or deleted")
        elif workload is None or workload.observed_generation != worker.generation:
            print("Current Worker readiness is not yet known")
        elif not workload.container_ready:
            print("Current Worker container is not ready")
        else:
            print("Current Worker container is ready")
        print("Total queued:", worker.jobs.queued)
        print("Unused capacity:", worker.unused_capacity)
    else:
        print("Job state:", state)

Supply exactly one of image or worker. The Worker must be a name/ID string, not a WorkerSummary; use worker.id for a returned summary. Worker-targeted submissions reject execution options, including empty mappings or lists.

Queue position and capacity are advisory. jobs_ahead counts earlier Jobs in the shared Worker queue; None also applies outside a queued targeted Job. Worker lookup is a separate observation from Job status. unused_capacity accounts for capacity still held during cleanup, and readiness must describe the current generation. Draining or deleted Workers cannot accept work. Zero Jobs ahead and a ready Worker do not guarantee immediate pickup; only Job state "running" confirms it. See the queue-status reference for details.

Wait, terminate, or reattach

Save job.id to observe the same Job from another process:

from anycloud import Client
from anycloud_workflows import DeploymentWaitTimeout, JobFailedError

with Client() as client:
    job = client.get("request-123")
    try:
        job.wait(timeout_seconds=900, poll_interval_seconds=2)
    except JobFailedError as error:
        print(error.deployment_id, error.state)
        print(error.status.deployment.state)
    except DeploymentWaitTimeout:
        print("Still waiting; requesting termination")
        job.terminate()

wait() returns the same handle after completed. Other terminal states raise JobFailedError, whose status contains the terminal response. DeploymentWaitTimeout only stops polling; this example explicitly chooses to terminate afterward. Termination is a request and does not wait for cleanup.

get(id) fetches status and returns a handle with last_status populated and submission=None. An eligible terminal Job can be submitted again with job.resubmit(). It keeps the same ID, returns a generated DeploymentResubmitResponse, and clears last_status after success. The API requires a resubmittable terminal state and completed cleanup, so immediate resubmission after terminate() can fail. Resubmission uses the client's configured request timeout as its elapsed request budget.

Handle Jobs inside a Worker

Install the same SDK in the Worker image. current_worker() discovers the injected Worker identity and rotating workload token. This sequential example defines a handler that performs ten short work steps and checks cancellation between them:

import time

import httpx

from anycloud.exceptions import ServiceException
from anycloud_workflows import CurrentJob, current_worker


def handle(job: CurrentJob) -> None:
    for step in range(10):
        if job.cancellation_requested():
            job.cleanup()
            return
        print(f"Processing {job.id}: step {step}")
        time.sleep(1)  # Replace this step with your application's work.
    job.complete()


with current_worker() as worker:
    while True:
        try:
            job = worker.next_job()
        except (httpx.HTTPError, ServiceException, TimeoutError):
            time.sleep(1)
            continue  # Replays the pending acquisition request safely.
        if job is None:
            time.sleep(1)
            continue
        handle(job)

next_job(timeout=20) waits up to 20 seconds to discover a candidate, claims it, and returns its CurrentJob. An attempted claim may resolve later within the separate request budget. Omitting timeout uses the 20-second wait; passing timeout=0 performs one immediate lookup. None means this call has no unresolved claim that can assign work later. Keep the same context after an exception: it retries the exact pending claim before discovering other work, even when the next call uses a different timeout. Request timeouts remain exceptions. current_worker(timeout_seconds=...) sets the separate elapsed request budget, capped at 30 seconds and shared by caller serialization, discovery, claim, decoding, and cancellation. Lifecycle calls remain usable while discovery waits.

For submission, client.submit(worker="model-workers", timeout=30, wait=True) returns after a durable first claim. Use job.wait() separately for completion. With wait=False, job.wait_for_claim() observes the persisted deadline later. Confirmed JobSubmissionExpired means the submission cannot start later; JobSubmissionTerminated and JobSubmissionChanged distinguish other pre-claim termination and explicit resubmission. These exceptions retain .job, .deployment_id, and .revision for recovery. Worker Client.submit() raises JobSubmissionUncertain with the unreturned .job and original .cause when admission is uncertain or its internal claim wait fails. Definitive admission rejections retain their generated exception types. Existing-handle request errors keep their original types. These submission exceptions are exported from anycloud_workflows.

job.resubmit(timeout=..., wait=True) keeps the ID and acknowledges a new revision; omission clears the old deadline. Automatic retries preserve their first-claim evidence. Use matching API/SDK releases.

Handlers need only the Job handle. Alongside complete(), they can report error(message), invalid(message), or retry(message). cancellation_requested() returns a bool; outcome methods and cleanup() return None. Cancellation is cooperative: stop work and release its resources before calling cleanup(). Outcomes do not stop application tasks for you.

Your application owns invocation lookup, concurrency, capacity, and liveness. Call next_job() only when there is capacity to handle another Job, keep the context open until every handler finishes, and exit if the critical acquisition loop dies so Kubernetes can replace the process. Every operation refreshes the projected token and preserves generated API exceptions.

job.selected exposes the original generated SelectedJob. Context lifecycle methods also accept handles or generated selections. For applications that own their generated client, WorkerJobPoller.next_job() returns SelectedJob directly.

Create and manage Workers

Create a Worker on an existing Cluster and pass its ID to submit():

from anycloud import Client

with Client() as client:
    worker = client.create_worker(
        "model-workers",
        "ghcr.io/acme/model-worker:latest",
        cluster="training",
        command=["python", "worker.py"],
        gpus=0,
        max_concurrent_jobs_per_replica=4,
    )
    job = client.submit(worker=worker.id)
    print(job.id)

create_worker(), get_worker(), update_worker(), and delete_worker() return generated WorkerSummary models. Updates preserve omitted settings; explicit None clears only command, env, or docker_options. Deletion starts draining without waiting for active Jobs or Pods to finish. Listing Workers uses the generated WorkersApi.

The Cluster VM type determines available GPUs. GPU Clusters require an explicit gpus value; gpus=0 deliberately requests a CPU-only Pod. Positive values require verified GPU capacity and cannot exceed the Cluster VM's supply. Workers do not accept named application Secrets; use an application-owned secret source rather than putting sensitive values in env.

Other resource operations

Use generated API-family clients for credentials, secrets, bucket metadata, Services, and other operations. They share the workflow client's connections and SDK version:

from anycloud import Client
from anycloud.api.buckets_api import BucketsApi
from anycloud.api.credentials_api import CredentialsApi
from anycloud.api.secrets_api import SecretsApi
from anycloud.models.save_secret_body import SaveSecretBody

with Client() as client:
    credentials = CredentialsApi(client.api_client).list_credentials_sync(
        client.sdk_version
    )
    print([credential.to_dict()["name"] for credential in credentials])

    SecretsApi(client.api_client).save_secret_sync(
        "training",
        client.sdk_version,
        SaveSecretBody(values={"TOKEN": "replace-with-your-application-token"}),
    )
    job = client.submit(
        "ghcr.io/acme/trainer:latest",
        credential_name="aws-prod",
        gpu="h100",
        secrets=["training"],
    )
    print(job.id)

    page = BucketsApi(client.api_client).list_buckets_sync(
        "aws-prod", client.sdk_version, page_size="100"
    )
    for bucket in page.buckets:
        print(bucket.to_dict()["name"])

Saving a secret stores it; secrets=["training"] injects its values into the Job. Bucket listings return a page; use next_cursor to request subsequent pages. Generated response models use Python field names on attributes and wire names in from_dict() and to_dict(). Union models expose their selected model through actual_instance; to_dict() also works across these variants.

Generated clients and asynchronous calls

Generated API operations have asynchronous methods and synchronous _sync variants. If you construct ApiClient directly, supply the API host ending in /v1, authentication, and the exact installed SDK version:

import asyncio
import os
from importlib.metadata import version

from anycloud.api.secrets_api import SecretsApi
from anycloud.api_client import ApiClient
from anycloud.configuration import Configuration


async def main() -> None:
    configuration = Configuration(
        host="http://localhost:8080/v1",
        access_token=os.environ["ANYCLOUD_TOKEN"],
    )
    async with ApiClient(configuration) as client:
        secrets = await SecretsApi(client).list_secrets(version("anycloud-sdk"))
        print([secret.name for secret in secrets])


asyncio.run(main())

Configuration does not perform the workflow client's CLI discovery. The lower-level anycloud_workflows.wait_for_terminal_deployment() accepts an existing generated client and returns a generated status response at any terminal state. See the SDK reference for generated deployment operations, method arguments, and return models.

Errors and current limitations

Generated API exceptions propagate unchanged through the workflow helpers. Catch anycloud.exceptions.ApiException or a status-specific subclass, such as ConflictException. HTTP status is in error.status; declared error data is in error.data. See error handling for typed error examples.

from anycloud import Client and from anycloud_workflows import Client refer to the same class. Import current_worker, CurrentJob, and polling errors from anycloud_workflows. Select compute credentials per submission with credential_name=, and use timeout_seconds= for waiting.

Service handles, JobGroup, submit_many(), and get_or_submit() are not available. Compose independent Jobs with ordinary Python loops and use generated operations for Services. SDK log streaming, exec, bucket handles, and bucket uploads and downloads are also absent; use the CLI for those transports. Bucket metadata operations and workload storage attachments remain available as shown above.

For contributor guidance, read extensions/README.md. Generated source lives under generated/anycloud and must not be edited by hand. Run yarn generate:python-sdk from the repository root after a contract or package-version change.