lightning-sdk 2025.11.5__py3-none-any.whl → 2025.11.13__py3-none-any.whl

lightning_sdk/__version__.py

@@ -1,3 +1,3 @@
 """Version information for lightning_sdk."""
 
-__version__ = "2025.11.05"
+__version__ = "2025.11.13"

lightning_sdk/api/utils.py

@@ -4,7 +4,8 @@ import math
 import os
 import re
 from concurrent.futures import ThreadPoolExecutor
-from functools import partial
+from enum import Enum
+from functools import lru_cache, partial
 from pathlib import Path
 from typing import Any, Callable, Dict, List, Optional, Tuple, TypedDict, Union
 
@@ -747,3 +748,59 @@ def resolve_path_mappings(
             )
 
     return path_mappings_list
+
+
+class AccessibleResource(Enum):
+    Studios = "studio"
+    Drive = "drive"
+    Jobs = "jobs"
+    Deployments = "deployments"
+    Pipelines = "pipelines"
+    Models = "models"
+    Containers = "containers"
+    Settings = "settings"
+
+    def __str__(self) -> str:
+        """Return the string representation of the resource type."""
+        return self.value
+
+    def __repr__(self) -> str:
+        """Return the string representation of the resource type."""
+        return self.value
+
+    def __eq__(self, other: object) -> bool:
+        """Return True if the resource type is equal to the other resource type."""
+        if isinstance(other, AccessibleResource):
+            return self.value == other.value
+        return str(other) == self.value
+
+    def __hash__(self) -> int:
+        """Return the hash of the resource type."""
+        return hash(self.value)
+
+
+@lru_cache
+def allowed_resource_access(resource_type: AccessibleResource, teamspace_id: str) -> bool:
+    # TODO: change this to proper API
+    from lightning_sdk.api.teamspace_api import TeamspaceApi
+
+    teamspace_api = TeamspaceApi()
+    teamspace = teamspace_api._get_teamspace_by_id(teamspace_id=teamspace_id)
+
+    # when we find the tab, check if it is enabled
+    if teamspace.layout_config:
+        for tab in teamspace.layout_config:
+            if tab.slug == resource_type:
+                return tab.is_enabled
+
+    # tab isn't found, allow access by default for backwards compatibility
+    # TODO: add additional checks here if required
+    return True
+
+
+def raise_access_error_if_not_allowed(resource_type: AccessibleResource, teamspace_id: str) -> None:
+    if not allowed_resource_access(resource_type, teamspace_id):
+        raise PermissionError(
+            f"Access to {resource_type.name} has been disabled for this teamspace. "
+            "Contact a teamspace administrator to enable it."
+        )

lightning_sdk/cli/legacy/deploy/serve.py

@@ -12,7 +12,7 @@ from rich.console import Console
 from rich.progress import Progress, SpinnerColumn, TextColumn, TimeElapsedColumn
 from rich.prompt import Confirm
 
-from lightning_sdk import Machine, Teamspace
+from lightning_sdk import CloudProvider, Machine, Teamspace
 from lightning_sdk.api.lit_container_api import LitContainerApi
 from lightning_sdk.api.utils import _get_registry_url
 from lightning_sdk.cli.legacy.clusters_menu import _ClustersMenu
@@ -122,6 +122,12 @@ def deploy() -> None:
         "If not provided will fall back to the teamspaces default cloud account."
     ),
 )
+@click.option(
+    "--cloud-provider",
+    "--cloud_provider",
+    default=None,
+    help="The provider to create the studio on. If --cloud-account is specified, this option is prioritized.",
+)
 @click.option("--port", default=8000, help="The port to expose the API on.")
 @click.option("--min_replica", "--min-replica", default=0, help="Number of replicas to start with.")
 @click.option("--max_replica", "--max-replica", default=1, help="Number of replicas to scale up to.")
@@ -152,6 +158,7 @@ def api(
     max_replica: Optional[int],
     replicas: Optional[int],
     no_credentials: Optional[bool],
+    cloud_provider: Optional[str],
 ) -> None:
     """Deploy a LitServe model script."""
     return api_impl(
@@ -172,6 +179,7 @@ def api(
         min_replica=min_replica,
         max_replica=max_replica,
         include_credentials=not no_credentials,
+        cloud_provider=cloud_provider,
     )
 
 
@@ -194,6 +202,7 @@ def api_impl(
     max_replica: Optional[int] = 1,
     replicas: Optional[int] = 1,
     include_credentials: Optional[bool] = True,
+    cloud_provider: Optional[str] = None,
 ) -> None:
     """Deploy a LitServe model script."""
     console = Console()
@@ -226,6 +235,7 @@ def api_impl(
         return _handle_devbox(name, script_path, console, non_interactive, machine, interruptible, teamspace, org, user)
 
     machine = Machine.from_str(machine)
+    cloud_provider = CloudProvider.from_str(cloud_provider) if cloud_provider else None
     return _handle_cloud(
         script_path,
         console,
@@ -243,6 +253,7 @@ def api_impl(
         max_replica=max_replica,
         replicas=replicas,
         include_credentials=include_credentials,
+        cloud_provider=cloud_provider,
     )
 
 
@@ -304,6 +315,7 @@ def _handle_cloud(
     max_replica: Optional[int] = 1,
     replicas: Optional[int] = 1,
     include_credentials: Optional[bool] = True,
+    cloud_provider: Optional[CloudProvider] = None,
 ) -> None:
     if not is_connected():
         console.print("❌ Internet connection required to deploy to the cloud.", style="red")
@@ -379,7 +391,7 @@ def _handle_cloud(
         resolved_teamspace = select_teamspace(teamspace, org, user)
 
     lightning_containers_cloud_account = cloud_account
-    if not cloud_account:
+    if not cloud_account and not cloud_provider:
         clusters_menu = _ClustersMenu()
         lightning_containers_cloud_account = clusters_menu._resolve_cluster(resolved_teamspace)
         cloud_account = resolved_teamspace.default_cloud_account
@@ -414,6 +426,7 @@ def _handle_cloud(
                 "include_credentials": include_credentials,
                 "cloudspace_id": cloudspace_id,
                 "from_onboarding": from_onboarding,
+                "cloud_provider": cloud_provider,
             },
         )
         thread.start()
@@ -446,6 +459,7 @@ def _handle_cloud(
         include_credentials=include_credentials,
         cloudspace_id=cloudspace_id,
         from_onboarding=from_onboarding,
+        cloud_provider=cloud_provider,
     )
     console.print(f"🚀 Deployment started, access at [i]{deployment_status.get('url')}[/i]")
     if user_status["onboarded"]:

lightning_sdk/cli/studio/__init__.py

@@ -6,6 +6,7 @@ import click
 def register_commands(group: click.Group) -> None:
     """Register studio commands with the given group."""
     from lightning_sdk.cli.studio.connect import connect_studio
+    from lightning_sdk.cli.studio.cp import cp_studio_file
     from lightning_sdk.cli.studio.create import create_studio
     from lightning_sdk.cli.studio.delete import delete_studio
     from lightning_sdk.cli.studio.list import list_studios
@@ -22,3 +23,4 @@ def register_commands(group: click.Group) -> None:
     group.add_command(stop_studio)
     group.add_command(switch_studio)
     group.add_command(connect_studio)
+    group.add_command(cp_studio_file)

lightning_sdk/cli/studio/cp.py

@@ -0,0 +1,138 @@
+"""Studio cp command."""
+
+from pathlib import Path
+from typing import Optional, TypedDict
+
+import click
+from rich.console import Console
+
+from lightning_sdk.api.utils import _get_cloud_url
+from lightning_sdk.cli.legacy.exceptions import StudioCliError
+from lightning_sdk.cli.utils.owner_selection import OwnerMenu
+from lightning_sdk.cli.utils.studio_selection import StudiosMenu
+from lightning_sdk.cli.utils.teamspace_selection import TeamspacesMenu
+from lightning_sdk.studio import Studio
+
+
+@click.command("cp")
+@click.argument("source", nargs=1)
+@click.argument("destination", nargs=1)
+def cp_studio_file(source: str, destination: str, teamspace: Optional[str] = None) -> None:
+    """Copy a Studio file.
+
+    SOURCE: Source file to copy from. For Studio files, use the format lit://<owner>/<my-teamspace>/studios/<my-studio>/<filepath>.
+
+    DESTINATION: Destination file to copy to. For Studio files, use the format lit://<owner>/<my-teamspace>/studios/<my-studio>/<filepath>.
+
+    Example:
+        lightning studio cp source.txt lit://<owner>/<my-teamspace>/studios/<my-studio>/destination.txt
+
+    """
+    return cp_impl(source=source, destination=destination)
+
+
+def cp_impl(source: str, destination: str) -> None:
+    if "lit://" in source and "lit://" in destination:
+        raise ValueError("Both source and destination cannot be Studio files.")
+    elif "lit://" not in source and "lit://" not in destination:
+        raise ValueError("Either source or destination must be a Studio file.")
+    elif "lit://" in source:
+        # Download from Studio to local
+        cp_download(studio_file_path=source, local_file_path=destination)
+    else:
+        # Upload from local to Studio
+        cp_upload(local_file_path=source, studio_file_path=destination)
+
+
+class StudioPathResult(TypedDict):
+    owner: Optional[str]
+    teamspace: Optional[str]
+    studio: Optional[str]
+    destination: Optional[str]
+
+
+def parse_studio_path(studio_path: str) -> StudioPathResult:
+    path_string = studio_path.removeprefix("lit://")
+    if not path_string:
+        raise ValueError("Studio path cannot be empty after prefix")
+
+    result: StudioPathResult = {"owner": None, "teamspace": None, "studio": None, "destination": None}
+
+    if "/studios/" in path_string:
+        prefix_part, suffix_part = path_string.split("/studios/", 1)
+
+        # org and teamspace
+        if prefix_part:
+            org_ts_components = prefix_part.split("/")
+            if len(org_ts_components) == 2:
+                result["owner"], result["teamspace"] = org_ts_components
+            elif len(org_ts_components) == 1:
+                result["teamspace"] = org_ts_components[0]
+            else:
+                raise ValueError(f"Invalid format: '{prefix_part}'")
+
+        # studio and destination
+        path_parts = suffix_part.split("/")
+
+    else:
+        # studio and destination
+        path_parts = path_string.split("/")
+
+    if not path_parts or len(path_parts) < 2:
+        raise ValueError("Invalid: Missing studio name.")
+
+    result["studio"] = path_parts[0]
+    result["destination"] = "/".join(path_parts[1:])
+
+    return result
+
+
+def cp_upload(
+    local_file_path: str,
+    studio_file_path: str,
+) -> None:
+    console = Console()
+    if Path(local_file_path).is_dir():
+        raise StudioCliError(
+            f"The provided path is a folder: {local_file_path}. Use `lightning upload folder` instead."
+        )
+    if not Path(local_file_path).exists():
+        raise FileNotFoundError(f"The provided path does not exist: {local_file_path}.")
+
+    studio_path_result = parse_studio_path(studio_file_path)
+
+    selected_studio = resolve_studio(
+        studio_path_result["studio"], studio_path_result["teamspace"], studio_path_result["owner"]
+    )
+    console.print(f"Uploading to {selected_studio.teamspace.name}/{selected_studio.name}")
+
+    selected_studio.upload_file(local_file_path, studio_file_path)
+
+    studio_url = (
+        _get_cloud_url().replace(":443", "")
+        + "/"
+        + selected_studio.owner.name
+        + "/"
+        + selected_studio.teamspace.name
+        + "/studios/"
+        + selected_studio.name
+    )
+    console.print(f"See your file at {studio_url}")
+
+
+def cp_download(
+    studio_file_path: str,
+    local_file_path: str,
+) -> None:
+    raise NotImplementedError("Download functionality is not implemented yet.")
+
+
+def resolve_studio(studio_name: Optional[str], teamspace: Optional[str], owner: Optional[str]) -> Studio:
+    owner_menu = OwnerMenu()
+    resolved_owner = owner_menu(owner=owner)
+
+    teamspace_menu = TeamspacesMenu(resolved_owner)
+    resolved_teamspace = teamspace_menu(teamspace=teamspace)
+
+    studio_menu = StudiosMenu(resolved_teamspace)
+    return studio_menu(studio=studio_name)

lightning_sdk/deployment/deployment.py

@@ -4,7 +4,7 @@ from typing import Any, Dict, List, Optional, Union
 
 import requests
 
-from lightning_sdk.api import UserApi
+from lightning_sdk.api import CloudAccountApi, UserApi
 from lightning_sdk.api.deployment_api import (
     ApiKeyAuth,
     Auth,
@@ -28,9 +28,10 @@ from lightning_sdk.api.deployment_api import (
     to_spec,
     to_strategy,
 )
+from lightning_sdk.api.utils import AccessibleResource, raise_access_error_if_not_allowed
 from lightning_sdk.lightning_cloud import login
 from lightning_sdk.lightning_cloud.openapi import V1Deployment
-from lightning_sdk.machine import Machine
+from lightning_sdk.machine import CloudProvider, Machine
 from lightning_sdk.organization import Organization
 from lightning_sdk.services.utilities import _get_cluster
 from lightning_sdk.studio import Studio
@@ -66,6 +67,7 @@ class Deployment(metaclass=TrackCallsMeta):
         user: Optional[Union[str, User]] = None,
     ) -> None:
         self._request_session = None
+        self._cloud_account_api = CloudAccountApi()
 
         self._auth = login.Auth()
         self._user = None
@@ -92,6 +94,8 @@ class Deployment(metaclass=TrackCallsMeta):
         if self._teamspace is None:
             raise ValueError("You need to pass a teamspace or an org for your deployment.")
 
+        raise_access_error_if_not_allowed(AccessibleResource.Deployments, self._teamspace.id)
+
         self._deployment_api = DeploymentApi()
         self._cloud_account = _get_cluster(client=self._deployment_api._client, project_id=self._teamspace.id)
         self._is_created = False
@@ -134,6 +138,7 @@ class Deployment(metaclass=TrackCallsMeta):
         from_litserve: Optional[bool] = None,
         max_runtime: Optional[int] = None,
         path_mappings: Optional[Dict[str, str]] = None,
+        cloud_provider: Optional[CloudProvider] = None,
     ) -> None:
         """The Lightning AI Deployment.
 
@@ -180,6 +185,7 @@ class Deployment(metaclass=TrackCallsMeta):
             only one of the arguments can be provided.
 
         """
+        raise_access_error_if_not_allowed(AccessibleResource.Deployments, self._teamspace.id)
         if self._is_created:
             raise RuntimeError("This deployment has already been started.")
 
@@ -199,10 +205,17 @@ class Deployment(metaclass=TrackCallsMeta):
         if cloud_account is None:
             cloud_account = _resolve_deprecated_cluster(cloud_account, cluster)
 
-        if cloud_account is None and self._cloud_account is not None:
+        if cloud_account is None and self._cloud_account is not None and cloud_provider is None:
             print(f"No cloud account was provided, defaulting to {self._cloud_account.cluster_id}")
             cloud_account = os.getenv("LIGHTNING_CLUSTER_ID") or self._cloud_account.cluster_id
 
+        _cloud_account = self._cloud_account_api.resolve_cloud_account(
+            self.teamspace.id,
+            cloud_account=cloud_account,
+            cloud_provider=cloud_provider,
+            default_cloud_account=self._teamspace.default_cloud_account,
+        )
+
         if isinstance(ports, float):
             ports = [ports]
 
@@ -237,7 +250,7 @@ class Deployment(metaclass=TrackCallsMeta):
                 replicas=replicas,
                 cloudspace_id=cloudspace_id,
                 spec=to_spec(
-                    cloud_account=cloud_account,
+                    cloud_account=_cloud_account,
                     command=command,
                     entrypoint=entrypoint,
                     env=env,
@@ -289,6 +302,7 @@ class Deployment(metaclass=TrackCallsMeta):
         max_runtime: Optional[int] = None,
         path_mappings: Optional[Dict[str, str]] = None,
     ) -> None:
+        raise_access_error_if_not_allowed(AccessibleResource.Deployments, self._teamspace.id)
         cloud_account = _resolve_deprecated_cluster(cloud_account, cluster)
 
         if command is None and commands is not None:

lightning_sdk/job/job.py

@@ -1,12 +1,14 @@
 from typing import TYPE_CHECKING, Any, Dict, Optional, Union
 
+from lightning_sdk.api.utils import AccessibleResource, raise_access_error_if_not_allowed
 from lightning_sdk.job.base import _BaseJob
 from lightning_sdk.job.v1 import _JobV1
 from lightning_sdk.job.v2 import _JobV2
-from lightning_sdk.utils.resolve import _setup_logger
+from lightning_sdk.utils.resolve import _resolve_teamspace, _setup_logger
 
 _logger = _setup_logger(__name__)
 
+
 if TYPE_CHECKING:
     from lightning_sdk.machine import CloudProvider, Machine
     from lightning_sdk.organization import Organization
@@ -39,6 +41,10 @@ class Job(_BaseJob):
             user: the name of the user owning the :param`teamspace`
                 in case it is owned directly by a user instead of an org.
         """
+        teamspace = _resolve_teamspace(teamspace=teamspace, org=org, user=user)
+
+        raise_access_error_if_not_allowed(AccessibleResource.Jobs, teamspace.id)
+
         from lightning_sdk.lightning_cloud.openapi.rest import ApiException
 
         if not self._force_v1:

lightning_sdk/lit_container.py

@@ -4,6 +4,7 @@ from typing import Dict, List, Optional
 from rich.console import Console
 
 from lightning_sdk.api.lit_container_api import LitContainerApi
+from lightning_sdk.api.utils import AccessibleResource, raise_access_error_if_not_allowed
 from lightning_sdk.utils.resolve import _resolve_teamspace
 
 
@@ -31,6 +32,8 @@ class LitContainer:
         except Exception:
             console.print(f"[bold red]Could not resolve teamspace: {teamspace}[/bold red]")
             return []
+
+        raise_access_error_if_not_allowed(AccessibleResource.Containers, teamspace.id)
         project_id = teamspace.id
         repositories = self._api.list_containers(project_id, cloud_account=cloud_account)
         table = []
@@ -68,6 +71,8 @@ class LitContainer:
             teamspace = _resolve_teamspace(teamspace=teamspace, org=org, user=user)
         except Exception as e:
             raise ValueError("Could not resolve teamspace") from e
+
+        raise_access_error_if_not_allowed(AccessibleResource.Containers, teamspace.id)
         project_id = teamspace.id
         return self._api.delete_container(project_id, container)
 
@@ -99,6 +104,8 @@ class LitContainer:
         except Exception as e:
             raise ValueError(f"Could not resolve teamspace: {e}") from e
 
+        raise_access_error_if_not_allowed(AccessibleResource.Containers, teamspace.id)
+
         resp = self._api.upload_container(
             container, teamspace, tag, cloud_account, platform=platform, return_final_dict=return_final_dict
         )
@@ -134,4 +141,6 @@ class LitContainer:
         except Exception as e:
             raise ValueError(f"Could not resolve teamspace: {e}") from e
 
+        raise_access_error_if_not_allowed(AccessibleResource.Containers, teamspace.id)
+
         return self._api.download_container(container, teamspace, tag, cloud_account)

lightning_sdk/machine.py

@@ -16,6 +16,14 @@ class CloudProvider(Enum):
         """Converts the CloudProvider to a str."""
         return self.value
 
+    @classmethod
+    def from_str(cls, provider: str) -> "CloudProvider":
+        """Converts a string to a CloudProvider enum member."""
+        for cp in cls:
+            if cp.value.lower() == provider.lower():
+                return cp
+        raise ValueError(f"Unknown CloudProvider: {provider}")
+
 
 @dataclass(frozen=True)
 class Machine:

lightning_sdk/mmt/mmt.py

@@ -1,10 +1,11 @@
 from typing import TYPE_CHECKING, Any, Dict, Optional, Tuple, Union
 
 from lightning_sdk.api.cloud_account_api import CloudAccountApi
+from lightning_sdk.api.utils import AccessibleResource, raise_access_error_if_not_allowed
 from lightning_sdk.mmt.base import MMTMachine, _BaseMMT
 from lightning_sdk.mmt.v1 import _MMTV1
 from lightning_sdk.mmt.v2 import _MMTV2
-from lightning_sdk.utils.resolve import _setup_logger
+from lightning_sdk.utils.resolve import _resolve_teamspace, _setup_logger
 
 if TYPE_CHECKING:
     from lightning_sdk.machine import CloudProvider, Machine
@@ -42,6 +43,9 @@ class MMT(_BaseMMT):
             user: the name of the user owning the :param`teamspace`
                 in case it is owned directly by a user instead of an org.
         """
+        teamspace = _resolve_teamspace(teamspace=teamspace, org=org, user=user)
+        raise_access_error_if_not_allowed(AccessibleResource.Jobs, teamspace_id=teamspace.id)
+
         from lightning_sdk.lightning_cloud.openapi.rest import ApiException
 
         if not self._force_v1:

lightning_sdk/models.py

@@ -4,6 +4,7 @@ from pathlib import Path
 from typing import TYPE_CHECKING, Any, Dict, List, Optional, Tuple, Union
 
 from lightning_sdk.api import OrgApi, TeamspaceApi, UserApi
+from lightning_sdk.api.utils import AccessibleResource, raise_access_error_if_not_allowed
 from lightning_sdk.lightning_cloud.openapi import V1ModelVersionArchive
 from lightning_sdk.lightning_cloud.openapi.models import V1Membership, V1OwnerType
 from lightning_sdk.lightning_cloud.openapi.rest import ApiException
@@ -121,6 +122,10 @@ def download_model(
     """
     name = _extend_model_name_with_teamspace(name)
     teamspace_owner_name, teamspace_name, model_name, version = _parse_org_teamspace_model_version(name)
+
+    teamspace = _get_teamspace(name=teamspace_name, organization=teamspace_owner_name)
+    raise_access_error_if_not_allowed(AccessibleResource.Models, teamspace.id)
+
     api = TeamspaceApi()
 
     try:
@@ -162,6 +167,7 @@ def upload_model(
     name = _extend_model_name_with_teamspace(name)
     org_name, teamspace_name, model_name, version = _parse_org_teamspace_model_version(name)
     teamspace = _get_teamspace(name=teamspace_name, organization=org_name)
+    raise_access_error_if_not_allowed(AccessibleResource.Models, teamspace.id)
     return teamspace.upload_model(
         path=path,
         name=model_name,
@@ -185,6 +191,7 @@ def delete_model(
     name = _extend_model_name_with_teamspace(name)
     org_name, teamspace_name, model_name, version = _parse_org_teamspace_model_version(name)
     teamspace = _get_teamspace(name=teamspace_name, organization=org_name)
+    raise_access_error_if_not_allowed(AccessibleResource.Models, teamspace.id)
     teamspace.delete_model(name=f"{model_name}:{version}" if version else model_name)
 
 
@@ -200,4 +207,5 @@ def list_model_versions(
     name = _extend_model_name_with_teamspace(name)
     org_name, teamspace_name, model_name, _ = _parse_org_teamspace_model_version(name)
     teamspace = _get_teamspace(name=teamspace_name, organization=org_name)
+    raise_access_error_if_not_allowed(AccessibleResource.Models, teamspace.id)
     return teamspace.list_model_versions(name=model_name)

lightning_sdk/pipeline/pipeline.py

@@ -3,6 +3,7 @@ from typing import List, Optional, Union
 
 from lightning_sdk.api.cloud_account_api import CloudAccountApi
 from lightning_sdk.api.pipeline_api import PipelineApi
+from lightning_sdk.api.utils import AccessibleResource, raise_access_error_if_not_allowed
 from lightning_sdk.machine import CloudProvider
 from lightning_sdk.organization import Organization
 from lightning_sdk.pipeline.printer import PipelinePrinter
@@ -49,6 +50,8 @@ class Pipeline:
         if self._teamspace is None:
             raise RuntimeError("Could not resolve teamspace")
 
+        raise_access_error_if_not_allowed(AccessibleResource.Pipelines, self._teamspace.id)
+
         self._pipeline_api = PipelineApi()
         self._cloud_account_api = CloudAccountApi()
         self._cloud_account = self._cloud_account_api.resolve_cloud_account(

lightning_sdk/serve.py

@@ -7,7 +7,7 @@ from typing import Generator, List, Optional, Union
 import docker
 from rich.console import Console
 
-from lightning_sdk import Deployment, Machine, Teamspace
+from lightning_sdk import CloudProvider, Deployment, Machine, Teamspace
 from lightning_sdk.api.deployment_api import AutoScaleConfig, DeploymentApi, Env, Secret
 from lightning_sdk.api.lit_container_api import LitContainerApi
 from lightning_sdk.api.utils import _get_cloud_url
@@ -249,6 +249,7 @@ Check out [blue][link=https://lightning.ai/docs/litserve/features]the docs[/link
         include_credentials: Optional[bool] = True,
         cloudspace_id: Optional[str] = None,
         from_onboarding: bool = False,
+        cloud_provider: Optional[CloudProvider] = None,
     ) -> dict:
         """Run a deployment on the cloud. If the deployment already exists, it will be updated.
 
@@ -304,6 +305,7 @@ Check out [blue][link=https://lightning.ai/docs/litserve/features]the docs[/link
             from_litserve=True,
             from_onboarding=from_onboarding,
             command="",
+            cloud_provider=cloud_provider,
         )
 
         return {"deployment": deployment, "url": url}

lightning_sdk/studio.py

@@ -8,6 +8,7 @@ from tqdm.auto import tqdm
 
 from lightning_sdk.api.cloud_account_api import CloudAccountApi
 from lightning_sdk.api.studio_api import StudioApi
+from lightning_sdk.api.utils import AccessibleResource, raise_access_error_if_not_allowed
 from lightning_sdk.base_studio import BaseStudio
 from lightning_sdk.constants import _LIGHTNING_DEBUG
 from lightning_sdk.lightning_cloud.openapi import V1ClusterType
@@ -97,6 +98,7 @@ class Studio(metaclass=TrackCallsMeta):
                 raise ValueError("Couldn't resolve teamspace from the provided name, org, or user")
 
             self._teamspace = _teamspace
+            raise_access_error_if_not_allowed(AccessibleResource.Studios, self._teamspace.id)
 
         self._setup_done = getattr(self._skip_setup, "value", False)
         self._disable_secrets = disable_secrets

lightning_sdk/teamspace.py

@@ -10,6 +10,7 @@ from tqdm.auto import tqdm
 import lightning_sdk
 from lightning_sdk.agents import Agent
 from lightning_sdk.api import CloudAccountApi, TeamspaceApi
+from lightning_sdk.api.utils import AccessibleResource, raise_access_error_if_not_allowed
 from lightning_sdk.lightning_cloud.openapi import V1ClusterType, V1Model, V1ModelVersionArchive, V1ProjectClusterBinding
 from lightning_sdk.machine import CloudProvider, Machine
 from lightning_sdk.models import UploadedModelInfo
@@ -143,12 +144,17 @@ class Teamspace(metaclass=TrackCallsMeta):
     @property
     def studios(self) -> List["Studio"]:
         """All studios within that teamspace."""
+        raise_access_error_if_not_allowed(AccessibleResource.Studios, self.id)
         from lightning_sdk.studio import Studio
 
         return self._get_studios(Studio)
 
     @property
     def vms(self) -> List["VM"]:
+        try:
+            raise_access_error_if_not_allowed(AccessibleResource.Studios, self.id)
+        except PermissionError as e:
+            raise PermissionError(str(e).replace("Studios", "VMs")) from e
         from lightning_sdk.studio import VM
 
         return [x for x in self._get_studios(VM) if isinstance(x, VM)]
@@ -204,6 +210,8 @@ class Teamspace(metaclass=TrackCallsMeta):
         from lightning_sdk.job import Job
         from lightning_sdk.plugin import forced_v1
 
+        raise_access_error_if_not_allowed(AccessibleResource.Jobs, self.id)
+
         jobsv1, jobsv2 = self._teamspace_api.list_jobs(teamspace_id=self.id)
 
         jobs = []
@@ -228,6 +236,8 @@ class Teamspace(metaclass=TrackCallsMeta):
         from lightning_sdk.mmt import MMT
         from lightning_sdk.plugin import forced_v1
 
+        raise_access_error_if_not_allowed(AccessibleResource.Jobs, self.id)
+
         mmtsv1, mmtsv2 = self._teamspace_api.list_mmts(teamspace_id=self.id)
 
         mmts = []
@@ -351,6 +361,7 @@ class Teamspace(metaclass=TrackCallsMeta):
             progress_bar: Whether to show a progress bar for the upload.
             metadata: Metadata to attach to the model. Can be a dictionary.
         """
+        raise_access_error_if_not_allowed(AccessibleResource.Models, self.id)
         if not path:
             raise ValueError("No path provided to upload")
         if not name:
@@ -430,6 +441,7 @@ class Teamspace(metaclass=TrackCallsMeta):
             The absolute path to the downloaded model file or folder.
 
         """
+        raise_access_error_if_not_allowed(AccessibleResource.Models, self.id)
         if not name:
             raise ValueError("No name provided for the model")
         if download_dir is None:
@@ -468,15 +480,18 @@ class Teamspace(metaclass=TrackCallsMeta):
                  e.g. 'entity/modelname:v1'.
 
         """
+        raise_access_error_if_not_allowed(AccessibleResource.Models, self.id)
         name, version = _parse_model_and_version(name)
         self._teamspace_api.delete_model(name=name, version=version, teamspace_id=self.id)
 
     def list_models(self) -> List[V1Model]:
         """List all models in the model store."""
+        raise_access_error_if_not_allowed(AccessibleResource.Models, self.id)
         return self._teamspace_api.list_models(teamspace_id=self.id)
 
     def list_model_versions(self, name: str) -> List[V1ModelVersionArchive]:
         """List all versions of a model in the model store."""
+        raise_access_error_if_not_allowed(AccessibleResource.Models, self.id)
         if ":" in name:
             raise ValueError(
                 "Model name should not contain a version tag. Please provide the model name without a version."

{lightning_sdk-2025.11.5.dist-info → lightning_sdk-2025.11.13.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: lightning_sdk
-Version: 2025.11.5
+Version: 2025.11.13
 Summary: SDK to develop using Lightning AI Studios
 Author-email: Lightning-AI <justus@lightning.ai>
 License: MIT License

{lightning_sdk-2025.11.5.dist-info → lightning_sdk-2025.11.13.dist-info}/RECORD

@@ -1,22 +1,22 @@
 docs/source/conf.py,sha256=r8yX20eC-4mHhMTd0SbQb5TlSWHhO6wnJ0VJ_FBFpag,13249
 lightning_sdk/__init__.py,sha256=aTu3zCrxj6rhgvc17ditLe71LTGvyU27Fg2GwOR4gUY,1301
-lightning_sdk/__version__.py,sha256=2ZSNbneC7ZSnz2YuQSFdnEZDjYLwTi8hkwfzgq0NAOI,73
+lightning_sdk/__version__.py,sha256=hqNBnV5LTBUIhMeuGeJkdLaMqcLZJZ6Gbyid4dzeywE,73
 lightning_sdk/agents.py,sha256=Uqsdu4PgswhpeXZzDSbp3hu30MMOhSlCnp8D56MaS_c,1658
 lightning_sdk/ai_hub.py,sha256=QzCfmX0h2CLn7r0DQyjWg6RnNw26Ey6akiP2Wffl9Ls,7006
 lightning_sdk/base_studio.py,sha256=yMvZ1dDq_avW3iu98CLEo9W9UL54mx4C6FC43IKLWAE,4691
 lightning_sdk/constants.py,sha256=Lr6MRnBieAbuT94w9KnbueuU15qz4N9Kgu1um7yH2nw,839
 lightning_sdk/helpers.py,sha256=WvsetkrXC8n4iQUFKpwQOKo7oaaOxgfWJm6KcMeVaTE,3508
-lightning_sdk/lit_container.py,sha256=8ys49TXI9MO89jLTA7MwDrKrssTRARAIF9OVmolDLq0,5273
-lightning_sdk/machine.py,sha256=GBx4w8qbx_V7ji4-f-uiZ04Z202muORW83Ku0nIbLfA,9614
-lightning_sdk/models.py,sha256=ur1My3oivAe0p2tAYtOAGM_1tPBht3Oh-xLun-oUK08,7861
+lightning_sdk/lit_container.py,sha256=9gAGoilwn6x0PF-FxcRm9wyJG64mqOs7HH76g8ksxsk,5715
+lightning_sdk/machine.py,sha256=ezAu7CnZi7TLJo9yGElRmt9j6RNrRGrBBJdr6giLx40,9918
+lightning_sdk/models.py,sha256=p0JZaInjFbxiUx96ZmfNQfr8VDL8n-ZekusqVmWlYHQ,8356
 lightning_sdk/organization.py,sha256=jizjG4oW_oxkP2Qz4vL5cle4Cg12xB_vf4eT-bnvLP0,1352
 lightning_sdk/owner.py,sha256=k0Hh0BQNxc6Jajzqt6jUgApM0IxHDNPIe_X1ocCI2Rk,1448
 lightning_sdk/plugin.py,sha256=yaQrIx2Tt18R0CoarJQAtB_AwaVa436f-eC5rb9yWe4,15579
 lightning_sdk/sandbox.py,sha256=_NvnWotEXW2rBiVFZZ4krKXxVjuAqfNh04qELSM0-Pg,5786
-lightning_sdk/serve.py,sha256=uW7zLhQ3X90ifetpxzTb8FNxifv5vIs7qZlgfEjVKzk,11794
+lightning_sdk/serve.py,sha256=XbllHwmOAOHjQJ0AQukwYe3OtspEwhmf5-_HXhL-mpc,11908
 lightning_sdk/status.py,sha256=lLGAuSvXBoXQFEEsEYwdCi0RcSNatUn5OPjJVjDtoM0,386
-lightning_sdk/studio.py,sha256=lTIZ7OHcv3Y5HchCO4pvl2u20KY0PryhAIM_krM3KaA,36975
-lightning_sdk/teamspace.py,sha256=9nXLkyHH52yeUu2W6TCF34AOlfzf_C2mFTs6EJn0pjc,26637
+lightning_sdk/studio.py,sha256=LVpyH58HaDcm5mNFrIYueoiERvUzO7Ed535aWTKs7-k,37159
+lightning_sdk/teamspace.py,sha256=pskDJWe3OGKFeXCKr-QZbzgor2AOQwdzgxqlS8Ahj_o,27558
 lightning_sdk/user.py,sha256=TSYh38rxoi7qKOfrK2JYh_Nknya2Kbz2ngDIY85fFOY,1778
 lightning_sdk/api/__init__.py,sha256=xrp_RNECJGQtL5rZHF69WOzEuEIbWSLtjWAJAz4R5K4,500
 lightning_sdk/api/agents_api.py,sha256=G47TbFo9kYqnBMqdw2RW-lfS1VAUBSXDmzs6fpIEMUs,4059
@@ -34,7 +34,7 @@ lightning_sdk/api/pipeline_api.py,sha256=rJYp_FN7uUjC5xbc6K67l2eRSmVuOkijd5i8Nm5
 lightning_sdk/api/studio_api.py,sha256=itQqpC9Be2O69CX7eful3Q2t66NrtMPAizhxUDImpKA,39927
 lightning_sdk/api/teamspace_api.py,sha256=wuwW4YbhloFqI9rS_5mbgsS6Dk3zYONLv9M6OoqyDg8,19980
 lightning_sdk/api/user_api.py,sha256=o9gZmtvqNfj4kdSpo2fyyRuFAP7bM5w7mx0Oj9__Ads,4702
-lightning_sdk/api/utils.py,sha256=1NJgW4HCfzMqgnAqbMA7RRr2v3iM3KTuPIUQK5klDeQ,27127
+lightning_sdk/api/utils.py,sha256=FvkpPt3-5IPfPW5QQsWoYlCC2SQXeQ-PB68gtICrWvM,29051
 lightning_sdk/cli/__init__.py,sha256=lksw08t_ZIuHOH47LCIqSVHeZ8cUXI2aJWHYhyujYHM,32
 lightning_sdk/cli/entrypoint.py,sha256=WsHbYB-rGIbXwz_Un6UiuOFdVPwXGTOs7GC5Zh4Y_B4,3467
 lightning_sdk/cli/groups.py,sha256=umtnKZm4xrIEtY-SWrC1KcKzYGvArr08qeP2zGPkyTk,1609
@@ -73,14 +73,15 @@ lightning_sdk/cli/legacy/upload.py,sha256=fFJct9F_1vLqTMLtSjuv4BN3AbUpeGebwv3ZXH
 lightning_sdk/cli/legacy/deploy/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 lightning_sdk/cli/legacy/deploy/_auth.py,sha256=nUe9Lqx154qapHRPdZCWqMICCEPWGjofnikYBdYcBBM,7680
 lightning_sdk/cli/legacy/deploy/devbox.py,sha256=SdOtYdGefzldn-WCa6sz31zysyf2nP5D7O2x1DE9z_E,6839
-lightning_sdk/cli/legacy/deploy/serve.py,sha256=bxN04mHlArjHtxR_QkCM0S_RPmL3WIPsgnPgFadSXwI,15478
+lightning_sdk/cli/legacy/deploy/serve.py,sha256=qzuJ6IRYaIEP9P_A6fGX1gRo2FX2i8gJC3vwX4vbFZs,16094
 lightning_sdk/cli/license/__init__.py,sha256=UmtIevklzc_2j4fZlrE9RyONHVs2E1AdZD66nWz0OPY,446
 lightning_sdk/cli/license/get.py,sha256=XkZvsuWwD5OdsAymzNggHJBuNEkZEhz0ZVl7lIWit6g,604
 lightning_sdk/cli/license/list.py,sha256=RUaR271kdHgTbFIagjOagopkOI8vmIHf3guaup0rzs8,1342
 lightning_sdk/cli/license/set.py,sha256=uGjFgq-3jkMF0IstMIIRjKn8GDzg9TIe1OZcRkDTrqg,515
 lightning_sdk/cli/mmt/__init__.py,sha256=CLgr-ZHHLS6Db_JGqpxbn4G2pYrKi4Qn-uhi8e0kFNc,145
-lightning_sdk/cli/studio/__init__.py,sha256=jqUuEniYlf3fwJni-MGLII3oprpsBSQEFqzBJwPIxMk,925
+lightning_sdk/cli/studio/__init__.py,sha256=wREPAmPJdN4b51r6RRD1o4aE212KN7xI88Z0O6HTzEU,1022
 lightning_sdk/cli/studio/connect.py,sha256=RLi5VumsVlVDlyiGbST7lDuHAntOj_-99KsNr8J3knE,5057
+lightning_sdk/cli/studio/cp.py,sha256=u1GM58i4YO70GqbgnNAIkG-HnIOW5b5y1Mby3SsQKRk,4748
 lightning_sdk/cli/studio/create.py,sha256=eVkuP1qg1aQSe2jyDgbIg-si5xPl8CwDIPcyvkUEFnQ,3179
 lightning_sdk/cli/studio/delete.py,sha256=Gi1KLCrSgjTiyoQe9NRvF4ZpsNyeM07KHnBxfdJg2FE,1483
 lightning_sdk/cli/studio/list.py,sha256=ieLiHRIfAb7E5e_r48BeTC03ib8RY6maeF7nkmrqaek,3301
@@ -110,10 +111,10 @@ lightning_sdk/cli/vm/start.py,sha256=v0FI482lscAN9S-XEW1IJ_sHiu45xSxCZJMHgPa8zNI
 lightning_sdk/cli/vm/stop.py,sha256=rZ-aWCE95n4wPe9edevXI0xq5RL5gxGeG8hCzvCyQCs,671
 lightning_sdk/cli/vm/switch.py,sha256=7jcKbTnqRv6JjOcDDVRDy8OP9xCxJ3ctLqBJViNAxbc,1174
 lightning_sdk/deployment/__init__.py,sha256=TRkd1xGCuYcsPzZwvq-vm_Qwlu3-htp8je-PYMcqjFc,579
-lightning_sdk/deployment/deployment.py,sha256=ODWC66iculfBYPpqLDIoCvFIWmOvDzg0LmwbHc5x3A4,22714
+lightning_sdk/deployment/deployment.py,sha256=iI2B9dIAQjknqzIcWNP2MsHr-l0K2E9SW1EJp-H24rs,23526
 lightning_sdk/job/__init__.py,sha256=1MxjQ6rHkyUHCypSW9RuXuVMVH11WiqhIXcU2LCFMwE,64
 lightning_sdk/job/base.py,sha256=4_hdUOqorLaaym10ccoB9TvWZM_btEJkVI5_wE9K0oM,21744
-lightning_sdk/job/job.py,sha256=mFmNv9zXYp1GCHno0Ii2myftG1CBt7TT3u8maw8fcd4,15551
+lightning_sdk/job/job.py,sha256=9RTMSf2czZbrrjrGZ-2fOZAWMIGomZMG2UE5D_6pgPs,15825
 lightning_sdk/job/v1.py,sha256=32mzDi4y2zNMYk9ZCMQS1c_yJfbnKrAjwKnJmo6HMCU,9977
 lightning_sdk/job/v2.py,sha256=VAArSIEDH05H3gnALVVPLNRrKm42cxG8No6i9jT_NzY,11710
 lightning_sdk/job/work.py,sha256=aRknNDja-96qQaYw0fNboEGtOZCmvztYEzUPxLNAt8g,2456
@@ -1240,11 +1241,11 @@ lightning_sdk/llm/llm.py,sha256=pjBs8fbGZjs0tQRKHx-WdfTmeECKAwI_T1ShVBgdyO4,2083
 lightning_sdk/llm/public_assistants.py,sha256=k0yc41AyrKImnRa8Fv-ow9javnlrRQeP63507p2VybA,1579
 lightning_sdk/mmt/__init__.py,sha256=ExMu90-96bGBnyp5h0CErQszUGB1-PcjC4-R8_NYbeY,117
 lightning_sdk/mmt/base.py,sha256=fP5bcZewLgUCLTH82CTauKSH6J4994pS8ZuFnzzN9BI,16991
-lightning_sdk/mmt/mmt.py,sha256=zPqPXgToOzwX_hzPTIuv7W_be8tvaQV700Vq1nFzOT0,15582
+lightning_sdk/mmt/mmt.py,sha256=LDXiPskJoZslEXapKE1WPIeczGAaOTP-RXZ1AgF68zw,15867
 lightning_sdk/mmt/v1.py,sha256=PRyqgoHUlzZWsjUv2q8vHT00FxyCSqqVt5p5R9tu36s,9114
 lightning_sdk/mmt/v2.py,sha256=iQOXb631M1zk63nJzomG-7fh0BLScZz98ndKjn4NMYo,11169
 lightning_sdk/pipeline/__init__.py,sha256=Sja_0NJ8vgh-2ThSVP3WDI9a9qghrWd21LkaQp4Zsp8,378
-lightning_sdk/pipeline/pipeline.py,sha256=A11Q_bRhiQm89n-VcdaXBJsvK8Yb_EY_IijOGnBmPoI,6163
+lightning_sdk/pipeline/pipeline.py,sha256=l9yZit7HVj8JyVFRWFGjeU4n6oG6J2f7MNEev650ONw,6346
 lightning_sdk/pipeline/printer.py,sha256=fsewFE_nnI-x5KscviYvQbKgNcgMyn-uT0UWlArGn-8,4828
 lightning_sdk/pipeline/schedule.py,sha256=J6lfjeuUMqGhX6xo6-qIliyi7KmB4e8BimTKJh7cJXY,20059
 lightning_sdk/pipeline/steps.py,sha256=vo7pC4gmcx_xMfWwAIctBk39QCxzmbjvDVwWSnTswI4,14424
@@ -1262,9 +1263,9 @@ lightning_sdk/utils/logging.py,sha256=WPyOx7KAn8OpRKqoDDlB7MkORtLDryJsj1WVXLYNqy
 lightning_sdk/utils/names.py,sha256=1EuXbIh7wldkDp1FG10oz9vIOyWrpGWeFFVy-DQBgzA,18162
 lightning_sdk/utils/progress.py,sha256=bLWw39fzq29PMWoFXaPIVfoS3Ug245950oWOFJ2ZaiU,12596
 lightning_sdk/utils/resolve.py,sha256=ukC-Zn35gNZV-fQ-ZyUgZkRPFb8nwsFh_aN7YcJ0sl8,10613
-lightning_sdk-2025.11.5.dist-info/LICENSE,sha256=uFIuZwj5z-4TeF2UuacPZ1o17HkvKObT8fY50qN84sg,1064
-lightning_sdk-2025.11.5.dist-info/METADATA,sha256=agAOAZJ6zSWJuOywfVIGN9BEYQdPzDPQvTP44ZxqWBY,4130
-lightning_sdk-2025.11.5.dist-info/WHEEL,sha256=iAkIy5fosb7FzIOwONchHf19Qu7_1wCWyFNR5gu9nU0,91
-lightning_sdk-2025.11.5.dist-info/entry_points.txt,sha256=OoZa4Fc8NMs6GSN0cdA1J8e6couzAcL82CbM1yo4f_M,122
-lightning_sdk-2025.11.5.dist-info/top_level.txt,sha256=ps8doKILFXmN7F1mHncShmnQoTxKBRPIcchC8TpoBw4,19
-lightning_sdk-2025.11.5.dist-info/RECORD,,
+lightning_sdk-2025.11.13.dist-info/LICENSE,sha256=uFIuZwj5z-4TeF2UuacPZ1o17HkvKObT8fY50qN84sg,1064
+lightning_sdk-2025.11.13.dist-info/METADATA,sha256=drF7S545973JTcSaLYX2usrmASxaJih4AB61RJGwsn8,4131
+lightning_sdk-2025.11.13.dist-info/WHEEL,sha256=iAkIy5fosb7FzIOwONchHf19Qu7_1wCWyFNR5gu9nU0,91
+lightning_sdk-2025.11.13.dist-info/entry_points.txt,sha256=OoZa4Fc8NMs6GSN0cdA1J8e6couzAcL82CbM1yo4f_M,122
+lightning_sdk-2025.11.13.dist-info/top_level.txt,sha256=ps8doKILFXmN7F1mHncShmnQoTxKBRPIcchC8TpoBw4,19
+lightning_sdk-2025.11.13.dist-info/RECORD,,