modal 0.5.5 → 0.6.0

package/README.md

@@ -45,6 +45,7 @@ We also provide a number of examples:
 - [Check the status and exit code of a Sandbox](https://github.com/modal-labs/libmodal/blob/main/modal-js/examples/sandbox-poll.ts)
 - [Access Sandbox filesystem](https://github.com/modal-labs/libmodal/blob/main/modal-js/examples/sandbox-filesystem.ts)
 - [Expose ports on a Sandbox using Tunnels](https://github.com/modal-labs/libmodal/blob/main/modal-js/examples/sandbox-tunnels.ts)
+- [Create connect tokens for a Sandbox](https://github.com/modal-labs/libmodal/blob/main/modal-js/examples/sandbox-connect-token.ts)
 - [Include Secrets in Sandbox](https://github.com/modal-labs/libmodal/blob/main/modal-js/examples/sandbox-secrets.ts)
 - [Mount a Volume to a Sandbox](https://github.com/modal-labs/libmodal/blob/main/modal-js/examples/sandbox-volume.ts), and same but [with an ephemeral Volume](https://github.com/modal-labs/libmodal/blob/main/modal-js/examples/sandbox-volume-ephemeral.ts)
 - [Mount a cloud bucket to a Sandbox](https://github.com/modal-labs/libmodal/blob/main/modal-js/examples/sandbox-cloud-bucket.ts)

package/dist/index.cjs

@@ -45741,11 +45741,19 @@ async function buildSandboxCreateRequestProto(appId, imageId, params = {}) {
     idleTimeout: "idleTimeoutMs"
   });
   const gpuConfig = parseGpuConfig(params.gpu);
+  if (params.timeoutMs != void 0 && params.timeoutMs <= 0) {
+    throw new Error(`timeoutMs must be positive, got ${params.timeoutMs}`);
+  }
   if (params.timeoutMs && params.timeoutMs % 1e3 !== 0) {
     throw new Error(
       `timeoutMs must be a multiple of 1000ms, got ${params.timeoutMs}`
     );
   }
+  if (params.idleTimeoutMs != void 0 && params.idleTimeoutMs <= 0) {
+    throw new Error(
+      `idleTimeoutMs must be positive, got ${params.idleTimeoutMs}`
+    );
+  }
   if (params.idleTimeoutMs && params.idleTimeoutMs % 1e3 !== 0) {
     throw new Error(
       `idleTimeoutMs must be a multiple of 1000ms, got ${params.idleTimeoutMs}`
@@ -45867,13 +45875,24 @@ async function buildSandboxCreateRequestProto(appId, imageId, params = {}) {
       memoryMbMax = params.memoryLimitMiB;
     }
   }
+  const protoExperimentalOptions = params.experimentalOptions ? Object.entries(params.experimentalOptions).reduce(
+    (acc, [name, value]) => {
+      if (typeof value !== "boolean") {
+        throw new Error(
+          `experimental option '${name}' must be a boolean, got ${value}`
+        );
+      }
+      acc[name] = Boolean(value);
+      return acc;
+    },
+    {}
+  ) : {};
   return SandboxCreateRequest.create({
     appId,
     definition: {
-      // Sleep default is implicit in image builder version <=2024.10
-      entrypointArgs: params.command ?? ["sleep", "48h"],
+      entrypointArgs: params.command ?? [],
       imageId,
-      timeoutSecs: params.timeoutMs != void 0 ? params.timeoutMs / 1e3 : 600,
+      timeoutSecs: params.timeoutMs != void 0 ? params.timeoutMs / 1e3 : 300,
       idleTimeoutSecs: params.idleTimeoutMs != void 0 ? params.idleTimeoutMs / 1e3 : void 0,
       workdir: params.workdir ?? void 0,
       networkAccess,
@@ -45893,7 +45912,8 @@ async function buildSandboxCreateRequestProto(appId, imageId, params = {}) {
       schedulerPlacement,
       verbose: params.verbose ?? false,
       proxyId: params.proxy?.proxyId,
-      name: params.name
+      name: params.name,
+      experimentalOptions: protoExperimentalOptions
     }
   });
 }
@@ -46062,6 +46082,14 @@ function defaultSandboxPTYInfo() {
 }
 async function buildContainerExecRequestProto(taskId, command, params) {
   checkForRenamedParams(params, { timeout: "timeoutMs" });
+  if (params?.timeoutMs != void 0 && params.timeoutMs <= 0) {
+    throw new Error(`timeoutMs must be positive, got ${params.timeoutMs}`);
+  }
+  if (params?.timeoutMs && params.timeoutMs % 1e3 !== 0) {
+    throw new Error(
+      `timeoutMs must be a multiple of 1000ms, got ${params.timeoutMs}`
+    );
+  }
   const secretIds = (params?.secrets || []).map((secret) => secret.secretId);
   let ptyInfo;
   if (params?.pty) {
@@ -46227,6 +46255,16 @@ var Sandbox2 = class _Sandbox {
     }
     return this.#taskId;
   }
+  /**
+   * Create a token for making HTTP connections to the Sandbox.
+   */
+  async createConnectToken(params) {
+    const resp = await this.#client.cpClient.sandboxCreateConnectToken({
+      sandboxId: this.sandboxId,
+      userMetadata: params?.userMetadata
+    });
+    return { url: resp.url, token: resp.token };
+  }
   async terminate() {
     await this.#client.cpClient.sandboxTerminate({ sandboxId: this.sandboxId });
     this.#taskId = void 0;
@@ -46672,24 +46710,27 @@ var AuthTokenManager = class {
   logger;
   currentToken = "";
   tokenExpiry = 0;
-  stopped = false;
   timeoutId = null;
-  initialTokenPromise = null;
+  running = false;
+  fetchPromise = null;
   constructor(client2, logger) {
     this.client = client2;
     this.logger = logger;
   }
   /**
-   * Returns the current cached token.
-   * If the initial token fetch is still in progress, waits for it to complete.
+   * Returns a valid auth token.
+   * If the current token is expired and the manager is running, triggers an on-demand refresh.
    */
   async getToken() {
-    if (this.initialTokenPromise) {
-      await this.initialTokenPromise;
-    }
     if (this.currentToken && !this.isExpired()) {
       return this.currentToken;
     }
+    if (this.running) {
+      await this.runFetch();
+      if (this.currentToken && !this.isExpired()) {
+        return this.currentToken;
+      }
+    }
     throw new Error("No valid auth token available");
   }
   /**
@@ -46726,7 +46767,7 @@ var AuthTokenManager = class {
    * Background loop that refreshes tokens REFRESH_WINDOW seconds before they expire.
    */
   async backgroundRefresh() {
-    while (!this.stopped) {
+    while (this.running) {
       const now = Math.floor(Date.now() / 1e3);
       const refreshTime = this.tokenExpiry - REFRESH_WINDOW;
       const delay = Math.max(0, refreshTime - now) * 1e3;
@@ -46734,11 +46775,11 @@ var AuthTokenManager = class {
         this.timeoutId = setTimeout(resolve, delay);
         this.timeoutId.unref();
       });
-      if (this.stopped) {
+      if (!this.running) {
         return;
       }
       try {
-        await this.fetchToken();
+        await this.runFetch();
       } catch (error) {
         this.logger.error("Failed to refresh auth token", "error", error);
         await new Promise((resolve) => setTimeout(resolve, 5e3));
@@ -46750,20 +46791,23 @@ var AuthTokenManager = class {
    * Throws an error if the initial token fetch fails.
    */
   async start() {
-    this.initialTokenPromise = this.fetchToken();
+    if (this.running) {
+      return;
+    }
+    this.running = true;
     try {
-      await this.initialTokenPromise;
-    } finally {
-      this.initialTokenPromise = null;
+      await this.runFetch();
+    } catch (error) {
+      this.running = false;
+      throw error;
     }
-    this.stopped = false;
     this.backgroundRefresh();
   }
   /**
    * Stops the background refresh.
    */
   stop() {
-    this.stopped = true;
+    this.running = false;
     if (this.timeoutId) {
       clearTimeout(this.timeoutId);
       this.timeoutId = null;
@@ -46793,6 +46837,18 @@ var AuthTokenManager = class {
     const now = Math.floor(Date.now() / 1e3);
     return now >= this.tokenExpiry;
   }
+  runFetch() {
+    if (!this.fetchPromise) {
+      this.fetchPromise = (async () => {
+        try {
+          await this.fetchToken();
+        } finally {
+          this.fetchPromise = null;
+        }
+      })();
+    }
+    return this.fetchPromise;
+  }
   getCurrentToken() {
     return this.currentToken;
   }
@@ -46804,7 +46860,7 @@ var AuthTokenManager = class {
 
 // src/version.ts
 function getSDKVersion() {
-  return true ? "0.5.5" : "0.0.0";
+  return true ? "0.6.0" : "0.0.0";
 }
 
 // src/logger.ts

package/dist/index.d.cts

@@ -5712,7 +5712,7 @@ type SandboxCreateParams = {
     memoryLimitMiB?: number;
     /** GPU reservation for the Sandbox (e.g. "A100", "T4:2", "A100-80GB:4"). */
     gpu?: string;
-    /** Timeout of the Sandbox container in milliseconds, defaults to 10 minutes. */
+    /** Maximum lifetime of the Sandbox in milliseconds. Defaults to 5 minutes. */
     timeoutMs?: number;
     /** The amount of time in milliseconds that a Sandbox can be idle before being terminated. */
     idleTimeoutMs?: number;
@@ -5753,6 +5753,8 @@ type SandboxCreateParams = {
     proxy?: Proxy;
     /** Optional name for the Sandbox. Unique within an App. */
     name?: string;
+    /** Optional experimental options. */
+    experimentalOptions?: Record<string, any>;
 };
 /**
  * Service for managing {@link Sandbox}es.
@@ -5824,6 +5826,16 @@ type SandboxExecParams = {
     /** Enable a PTY for the command. */
     pty?: boolean;
 };
+/** Optional parameters for {@link Sandbox#createConnectToken Sandbox.createConnectToken()}. */
+type SandboxCreateConnectTokenParams = {
+    /** Optional user-provided metadata string that will be added to the headers by the proxy when forwarding requests to the Sandbox. */
+    userMetadata?: string;
+};
+/** Credentials returned by {@link Sandbox#createConnectToken Sandbox.createConnectToken()}. */
+type SandboxCreateConnectCredentials = {
+    url: string;
+    token: string;
+};
 /** A port forwarded from within a running Modal {@link Sandbox}. */
 declare class Tunnel {
     host: string;
@@ -5873,6 +5885,10 @@ declare class Sandbox {
     exec(command: string[], params: SandboxExecParams & {
         mode: "binary";
     }): Promise<ContainerProcess<Uint8Array>>;
+    /**
+     * Create a token for making HTTP connections to the Sandbox.
+     */
+    createConnectToken(params?: SandboxCreateConnectTokenParams): Promise<SandboxCreateConnectCredentials>;
     terminate(): Promise<void>;
     wait(): Promise<number>;
     /** Get {@link Tunnel} metadata for the Sandbox.
@@ -6139,4 +6155,4 @@ declare class SandboxTimeoutError extends Error {
 
 declare function checkForRenamedParams(params: any, renames: Record<string, string>): void;
 
-export { AlreadyExistsError, App, type AppFromNameParams, AppService, type ClientOptions, CloudBucketMount, CloudBucketMountService, Cls, type ClsFromNameParams, ClsInstance, ClsService, type ClsWithBatchingParams, type ClsWithConcurrencyParams, type ClsWithOptionsParams, ContainerProcess, type DeleteOptions, type EphemeralOptions, FunctionCall, type FunctionCallCancelParams, type FunctionCallGetParams, FunctionCallService, type FunctionFromNameParams, FunctionService, type FunctionStats, FunctionTimeoutError, type FunctionUpdateAutoscalerParams, Function_, Image, type ImageDeleteParams, type ImageDockerfileCommandsParams, ImageService, InternalFailure, InvalidError, type LogLevel, type Logger, type LookupOptions, ModalClient, type ModalClientParams, type ModalReadStream, type ModalWriteStream, NotFoundError, type Profile, Proxy, type ProxyFromNameParams, ProxyService, Queue, type QueueClearParams, type QueueDeleteParams, QueueEmptyError, type QueueEphemeralParams, type QueueFromNameParams, QueueFullError, type QueueGetParams, type QueueIterateParams, type QueueLenParams, type QueuePutParams, QueueService, RemoteError, Retries, Sandbox, type SandboxCreateParams, type SandboxExecParams, SandboxFile, type SandboxFileMode, type SandboxFromNameParams, type SandboxListParams, SandboxService, SandboxTimeoutError, Secret, type SecretDeleteParams, type SecretFromNameParams, type SecretFromObjectParams, SecretService, type StdioBehavior, type StreamMode, Tunnel, Volume, type VolumeDeleteParams, type VolumeEphemeralParams, type VolumeFromNameParams, VolumeService, checkForRenamedParams, close, initializeClient };
+export { AlreadyExistsError, App, type AppFromNameParams, AppService, type ClientOptions, CloudBucketMount, CloudBucketMountService, Cls, type ClsFromNameParams, ClsInstance, ClsService, type ClsWithBatchingParams, type ClsWithConcurrencyParams, type ClsWithOptionsParams, ContainerProcess, type DeleteOptions, type EphemeralOptions, FunctionCall, type FunctionCallCancelParams, type FunctionCallGetParams, FunctionCallService, type FunctionFromNameParams, FunctionService, type FunctionStats, FunctionTimeoutError, type FunctionUpdateAutoscalerParams, Function_, Image, type ImageDeleteParams, type ImageDockerfileCommandsParams, ImageService, InternalFailure, InvalidError, type LogLevel, type Logger, type LookupOptions, ModalClient, type ModalClientParams, type ModalReadStream, type ModalWriteStream, NotFoundError, type Profile, Proxy, type ProxyFromNameParams, ProxyService, Queue, type QueueClearParams, type QueueDeleteParams, QueueEmptyError, type QueueEphemeralParams, type QueueFromNameParams, QueueFullError, type QueueGetParams, type QueueIterateParams, type QueueLenParams, type QueuePutParams, QueueService, RemoteError, Retries, Sandbox, type SandboxCreateConnectCredentials, type SandboxCreateConnectTokenParams, type SandboxCreateParams, type SandboxExecParams, SandboxFile, type SandboxFileMode, type SandboxFromNameParams, type SandboxListParams, SandboxService, SandboxTimeoutError, Secret, type SecretDeleteParams, type SecretFromNameParams, type SecretFromObjectParams, SecretService, type StdioBehavior, type StreamMode, Tunnel, Volume, type VolumeDeleteParams, type VolumeEphemeralParams, type VolumeFromNameParams, VolumeService, checkForRenamedParams, close, initializeClient };

package/dist/index.d.ts

@@ -5712,7 +5712,7 @@ type SandboxCreateParams = {
     memoryLimitMiB?: number;
     /** GPU reservation for the Sandbox (e.g. "A100", "T4:2", "A100-80GB:4"). */
     gpu?: string;
-    /** Timeout of the Sandbox container in milliseconds, defaults to 10 minutes. */
+    /** Maximum lifetime of the Sandbox in milliseconds. Defaults to 5 minutes. */
     timeoutMs?: number;
     /** The amount of time in milliseconds that a Sandbox can be idle before being terminated. */
     idleTimeoutMs?: number;
@@ -5753,6 +5753,8 @@ type SandboxCreateParams = {
     proxy?: Proxy;
     /** Optional name for the Sandbox. Unique within an App. */
     name?: string;
+    /** Optional experimental options. */
+    experimentalOptions?: Record<string, any>;
 };
 /**
  * Service for managing {@link Sandbox}es.
@@ -5824,6 +5826,16 @@ type SandboxExecParams = {
     /** Enable a PTY for the command. */
     pty?: boolean;
 };
+/** Optional parameters for {@link Sandbox#createConnectToken Sandbox.createConnectToken()}. */
+type SandboxCreateConnectTokenParams = {
+    /** Optional user-provided metadata string that will be added to the headers by the proxy when forwarding requests to the Sandbox. */
+    userMetadata?: string;
+};
+/** Credentials returned by {@link Sandbox#createConnectToken Sandbox.createConnectToken()}. */
+type SandboxCreateConnectCredentials = {
+    url: string;
+    token: string;
+};
 /** A port forwarded from within a running Modal {@link Sandbox}. */
 declare class Tunnel {
     host: string;
@@ -5873,6 +5885,10 @@ declare class Sandbox {
     exec(command: string[], params: SandboxExecParams & {
         mode: "binary";
     }): Promise<ContainerProcess<Uint8Array>>;
+    /**
+     * Create a token for making HTTP connections to the Sandbox.
+     */
+    createConnectToken(params?: SandboxCreateConnectTokenParams): Promise<SandboxCreateConnectCredentials>;
     terminate(): Promise<void>;
     wait(): Promise<number>;
     /** Get {@link Tunnel} metadata for the Sandbox.
@@ -6139,4 +6155,4 @@ declare class SandboxTimeoutError extends Error {
 
 declare function checkForRenamedParams(params: any, renames: Record<string, string>): void;
 
-export { AlreadyExistsError, App, type AppFromNameParams, AppService, type ClientOptions, CloudBucketMount, CloudBucketMountService, Cls, type ClsFromNameParams, ClsInstance, ClsService, type ClsWithBatchingParams, type ClsWithConcurrencyParams, type ClsWithOptionsParams, ContainerProcess, type DeleteOptions, type EphemeralOptions, FunctionCall, type FunctionCallCancelParams, type FunctionCallGetParams, FunctionCallService, type FunctionFromNameParams, FunctionService, type FunctionStats, FunctionTimeoutError, type FunctionUpdateAutoscalerParams, Function_, Image, type ImageDeleteParams, type ImageDockerfileCommandsParams, ImageService, InternalFailure, InvalidError, type LogLevel, type Logger, type LookupOptions, ModalClient, type ModalClientParams, type ModalReadStream, type ModalWriteStream, NotFoundError, type Profile, Proxy, type ProxyFromNameParams, ProxyService, Queue, type QueueClearParams, type QueueDeleteParams, QueueEmptyError, type QueueEphemeralParams, type QueueFromNameParams, QueueFullError, type QueueGetParams, type QueueIterateParams, type QueueLenParams, type QueuePutParams, QueueService, RemoteError, Retries, Sandbox, type SandboxCreateParams, type SandboxExecParams, SandboxFile, type SandboxFileMode, type SandboxFromNameParams, type SandboxListParams, SandboxService, SandboxTimeoutError, Secret, type SecretDeleteParams, type SecretFromNameParams, type SecretFromObjectParams, SecretService, type StdioBehavior, type StreamMode, Tunnel, Volume, type VolumeDeleteParams, type VolumeEphemeralParams, type VolumeFromNameParams, VolumeService, checkForRenamedParams, close, initializeClient };
+export { AlreadyExistsError, App, type AppFromNameParams, AppService, type ClientOptions, CloudBucketMount, CloudBucketMountService, Cls, type ClsFromNameParams, ClsInstance, ClsService, type ClsWithBatchingParams, type ClsWithConcurrencyParams, type ClsWithOptionsParams, ContainerProcess, type DeleteOptions, type EphemeralOptions, FunctionCall, type FunctionCallCancelParams, type FunctionCallGetParams, FunctionCallService, type FunctionFromNameParams, FunctionService, type FunctionStats, FunctionTimeoutError, type FunctionUpdateAutoscalerParams, Function_, Image, type ImageDeleteParams, type ImageDockerfileCommandsParams, ImageService, InternalFailure, InvalidError, type LogLevel, type Logger, type LookupOptions, ModalClient, type ModalClientParams, type ModalReadStream, type ModalWriteStream, NotFoundError, type Profile, Proxy, type ProxyFromNameParams, ProxyService, Queue, type QueueClearParams, type QueueDeleteParams, QueueEmptyError, type QueueEphemeralParams, type QueueFromNameParams, QueueFullError, type QueueGetParams, type QueueIterateParams, type QueueLenParams, type QueuePutParams, QueueService, RemoteError, Retries, Sandbox, type SandboxCreateConnectCredentials, type SandboxCreateConnectTokenParams, type SandboxCreateParams, type SandboxExecParams, SandboxFile, type SandboxFileMode, type SandboxFromNameParams, type SandboxListParams, SandboxService, SandboxTimeoutError, Secret, type SecretDeleteParams, type SecretFromNameParams, type SecretFromObjectParams, SecretService, type StdioBehavior, type StreamMode, Tunnel, Volume, type VolumeDeleteParams, type VolumeEphemeralParams, type VolumeFromNameParams, VolumeService, checkForRenamedParams, close, initializeClient };

package/dist/index.js

@@ -45673,11 +45673,19 @@ async function buildSandboxCreateRequestProto(appId, imageId, params = {}) {
     idleTimeout: "idleTimeoutMs"
   });
   const gpuConfig = parseGpuConfig(params.gpu);
+  if (params.timeoutMs != void 0 && params.timeoutMs <= 0) {
+    throw new Error(`timeoutMs must be positive, got ${params.timeoutMs}`);
+  }
   if (params.timeoutMs && params.timeoutMs % 1e3 !== 0) {
     throw new Error(
       `timeoutMs must be a multiple of 1000ms, got ${params.timeoutMs}`
     );
   }
+  if (params.idleTimeoutMs != void 0 && params.idleTimeoutMs <= 0) {
+    throw new Error(
+      `idleTimeoutMs must be positive, got ${params.idleTimeoutMs}`
+    );
+  }
   if (params.idleTimeoutMs && params.idleTimeoutMs % 1e3 !== 0) {
     throw new Error(
       `idleTimeoutMs must be a multiple of 1000ms, got ${params.idleTimeoutMs}`
@@ -45799,13 +45807,24 @@ async function buildSandboxCreateRequestProto(appId, imageId, params = {}) {
       memoryMbMax = params.memoryLimitMiB;
     }
   }
+  const protoExperimentalOptions = params.experimentalOptions ? Object.entries(params.experimentalOptions).reduce(
+    (acc, [name, value]) => {
+      if (typeof value !== "boolean") {
+        throw new Error(
+          `experimental option '${name}' must be a boolean, got ${value}`
+        );
+      }
+      acc[name] = Boolean(value);
+      return acc;
+    },
+    {}
+  ) : {};
   return SandboxCreateRequest.create({
     appId,
     definition: {
-      // Sleep default is implicit in image builder version <=2024.10
-      entrypointArgs: params.command ?? ["sleep", "48h"],
+      entrypointArgs: params.command ?? [],
       imageId,
-      timeoutSecs: params.timeoutMs != void 0 ? params.timeoutMs / 1e3 : 600,
+      timeoutSecs: params.timeoutMs != void 0 ? params.timeoutMs / 1e3 : 300,
       idleTimeoutSecs: params.idleTimeoutMs != void 0 ? params.idleTimeoutMs / 1e3 : void 0,
       workdir: params.workdir ?? void 0,
       networkAccess,
@@ -45825,7 +45844,8 @@ async function buildSandboxCreateRequestProto(appId, imageId, params = {}) {
       schedulerPlacement,
       verbose: params.verbose ?? false,
       proxyId: params.proxy?.proxyId,
-      name: params.name
+      name: params.name,
+      experimentalOptions: protoExperimentalOptions
     }
   });
 }
@@ -45994,6 +46014,14 @@ function defaultSandboxPTYInfo() {
 }
 async function buildContainerExecRequestProto(taskId, command, params) {
   checkForRenamedParams(params, { timeout: "timeoutMs" });
+  if (params?.timeoutMs != void 0 && params.timeoutMs <= 0) {
+    throw new Error(`timeoutMs must be positive, got ${params.timeoutMs}`);
+  }
+  if (params?.timeoutMs && params.timeoutMs % 1e3 !== 0) {
+    throw new Error(
+      `timeoutMs must be a multiple of 1000ms, got ${params.timeoutMs}`
+    );
+  }
   const secretIds = (params?.secrets || []).map((secret) => secret.secretId);
   let ptyInfo;
   if (params?.pty) {
@@ -46159,6 +46187,16 @@ var Sandbox2 = class _Sandbox {
     }
     return this.#taskId;
   }
+  /**
+   * Create a token for making HTTP connections to the Sandbox.
+   */
+  async createConnectToken(params) {
+    const resp = await this.#client.cpClient.sandboxCreateConnectToken({
+      sandboxId: this.sandboxId,
+      userMetadata: params?.userMetadata
+    });
+    return { url: resp.url, token: resp.token };
+  }
   async terminate() {
     await this.#client.cpClient.sandboxTerminate({ sandboxId: this.sandboxId });
     this.#taskId = void 0;
@@ -46604,24 +46642,27 @@ var AuthTokenManager = class {
   logger;
   currentToken = "";
   tokenExpiry = 0;
-  stopped = false;
   timeoutId = null;
-  initialTokenPromise = null;
+  running = false;
+  fetchPromise = null;
   constructor(client2, logger) {
     this.client = client2;
     this.logger = logger;
   }
   /**
-   * Returns the current cached token.
-   * If the initial token fetch is still in progress, waits for it to complete.
+   * Returns a valid auth token.
+   * If the current token is expired and the manager is running, triggers an on-demand refresh.
    */
   async getToken() {
-    if (this.initialTokenPromise) {
-      await this.initialTokenPromise;
-    }
     if (this.currentToken && !this.isExpired()) {
       return this.currentToken;
     }
+    if (this.running) {
+      await this.runFetch();
+      if (this.currentToken && !this.isExpired()) {
+        return this.currentToken;
+      }
+    }
     throw new Error("No valid auth token available");
   }
   /**
@@ -46658,7 +46699,7 @@ var AuthTokenManager = class {
    * Background loop that refreshes tokens REFRESH_WINDOW seconds before they expire.
    */
   async backgroundRefresh() {
-    while (!this.stopped) {
+    while (this.running) {
       const now = Math.floor(Date.now() / 1e3);
       const refreshTime = this.tokenExpiry - REFRESH_WINDOW;
       const delay = Math.max(0, refreshTime - now) * 1e3;
@@ -46666,11 +46707,11 @@ var AuthTokenManager = class {
         this.timeoutId = setTimeout(resolve, delay);
         this.timeoutId.unref();
       });
-      if (this.stopped) {
+      if (!this.running) {
         return;
       }
       try {
-        await this.fetchToken();
+        await this.runFetch();
       } catch (error) {
         this.logger.error("Failed to refresh auth token", "error", error);
         await new Promise((resolve) => setTimeout(resolve, 5e3));
@@ -46682,20 +46723,23 @@ var AuthTokenManager = class {
    * Throws an error if the initial token fetch fails.
    */
   async start() {
-    this.initialTokenPromise = this.fetchToken();
+    if (this.running) {
+      return;
+    }
+    this.running = true;
     try {
-      await this.initialTokenPromise;
-    } finally {
-      this.initialTokenPromise = null;
+      await this.runFetch();
+    } catch (error) {
+      this.running = false;
+      throw error;
     }
-    this.stopped = false;
     this.backgroundRefresh();
   }
   /**
    * Stops the background refresh.
    */
   stop() {
-    this.stopped = true;
+    this.running = false;
     if (this.timeoutId) {
       clearTimeout(this.timeoutId);
       this.timeoutId = null;
@@ -46725,6 +46769,18 @@ var AuthTokenManager = class {
     const now = Math.floor(Date.now() / 1e3);
     return now >= this.tokenExpiry;
   }
+  runFetch() {
+    if (!this.fetchPromise) {
+      this.fetchPromise = (async () => {
+        try {
+          await this.fetchToken();
+        } finally {
+          this.fetchPromise = null;
+        }
+      })();
+    }
+    return this.fetchPromise;
+  }
   getCurrentToken() {
     return this.currentToken;
   }
@@ -46736,7 +46792,7 @@ var AuthTokenManager = class {
 
 // src/version.ts
 function getSDKVersion() {
-  return true ? "0.5.5" : "0.0.0";
+  return true ? "0.6.0" : "0.0.0";
 }
 
 // src/logger.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "modal",
-  "version": "0.5.5",
+  "version": "0.6.0",
   "description": "Modal SDK for JavaScript/TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://modal.com/docs/guide/sdk-javascript-go",