modAL 1.6.2.dev8__py3-none-any.whl → 1.6.2.dev10__py3-none-any.whl

modal/_workspace.py

@@ -8,7 +8,8 @@ from typing import Optional
 
 from google.protobuf.empty_pb2 import Empty
 
-from modal.exception import DeprecationError, InvalidError
+from modal.exception import DeprecationError, InvalidError, NotFoundError
+from modal.types import ServiceUserInfo
 from modal_proto import api_pb2
 
 from ._load_context import LoadContext
@@ -129,6 +130,15 @@ class _Workspace(_Object, type_prefix="ac"):
         """Namespace for Workspace settings APIs."""
         return _WorkspaceSettingsManager(self)
 
+    @property
+    def service_users(self) -> "_WorkspaceServiceUserManager":
+        """Namespace for managing Service Users in a Workspace.
+
+        See [the guide](https://modal.com/docs/guide/service-users) for more information about Service
+        Users.
+        """
+        return _WorkspaceServiceUserManager(self)
+
 
 class _WorkspaceProxyTokenManager:
     """mdmd:namespace"""
@@ -556,3 +566,172 @@ class _WorkspaceSettingsManager:
                 await self._set_default_environment(value)
             case _:
                 raise ValueError(f"Unknown setting {name!r}. Valid settings: {', '.join(self._valid_settings())}")
+
+
+class _WorkspaceServiceUserManager:
+    """mdmd:namespace"""
+
+    def __init__(self, workspace: _Workspace):
+        """mdmd:hidden"""
+        self._workspace = workspace
+
+    async def create(self, name: str, *, expires_in: int | None) -> TokenData:
+        """Create a new Service User in the current workspace.
+
+        To call this function, you are required to have Manager permissions in the Workspace.
+
+        Args:
+            name: The name of the new Service User. Must consistent only of alphanumeric, '-', or '_'
+                characters.
+            expires_in: An expiration time, in seconds, after which the token will stop working. If
+                `None`, the token will never expire.
+
+        Returns:
+            A `TokenData` dataclass containing the credentials for the Service User. Note that this
+            is the only time you will be able to view these credentials.
+
+        Examples:
+
+        ```python notest
+        ws = modal.Workspace.from_context()
+
+        # Creates a Service User named "test-service-user", whose credentials expire after one year.
+        service_user_token_data = ws.service_users.create(
+            "test-service-user",
+            expires_in=datetime.timedelta(days=365).total_seconds(),
+        )
+        ```
+        """
+        if not self._workspace._is_hydrated:
+            await self._workspace.hydrate()
+
+        if expires_in is None:
+            req = api_pb2.ServiceUserCreateRequest(name=name)
+        else:
+            req = api_pb2.ServiceUserCreateRequest(name=name, expires_in_seconds=expires_in)
+
+        resp = await self._workspace.client._stub.ServiceUserCreate(req)
+
+        return TokenData(token_id=resp.token_id, token_secret=resp.token_secret)
+
+    async def set_role(
+        self,
+        service_user_name: str,
+        environment_name: str,
+        *,
+        role: str,
+    ) -> None:
+        """Set the role of a specified Service User within an Environment.
+
+        To call this function, you are required to have Manager permissions in the Workspace.
+
+        Args:
+            service_user_name: The name of the Service User.
+            environment_name: The name of the Environment to which the Service User's new role will
+                apply.
+            role: The access level to grant this Service User.
+
+        Examples:
+
+        ```python notest
+        ws = modal.Workspace.from_context()
+        # Grants Service User "test-service-user" the Viewer role in Environment "production"
+        ws.service_users.set_role("test-service-user", "production", role="viewer")
+
+        # Revokes access to "production" from Service User "test-service-user"
+        ws.service_users.set_role("test-service-user", "production", role="no-access")
+        ```
+        """
+
+        if not role:
+            raise InvalidError("Invalid argument: `role` must not be empty.")
+
+        if not self._workspace._is_hydrated:
+            await self._workspace.hydrate()
+
+        from ._environments import _Environment
+
+        env = _Environment.from_name(environment_name, client=self._workspace.client)
+        await env.hydrate()
+
+        await self._workspace.client._stub.EnvironmentRoleSet(
+            api_pb2.EnvironmentRoleSetRequest(
+                service_user_name=service_user_name,
+                environment_id=env.object_id,
+                role_str=role,
+            )
+        )
+
+    async def info(self, name: str) -> ServiceUserInfo:
+        """Get information about a specific Service User.
+
+        Args:
+            name: The name of the Service User to introspect.
+
+        Returns:
+            A `ServiceUserInfo` dataclass containing information about the Service User.
+
+        Examples:
+
+        ```python notest
+        ws = modal.Workspace.from_context()
+        service_user = ws.service_users.info("test-service-user")
+        ```
+        """
+
+        if not self._workspace._is_hydrated:
+            await self._workspace.hydrate()
+
+        resp = await self._workspace.client._stub.ServiceUserInfo(
+            api_pb2.ServiceUserInfoRequest(service_user_name=name)
+        )
+
+        return ServiceUserInfo._from_proto(resp.service_user)
+
+    async def list(self) -> list[ServiceUserInfo]:
+        """List all Service Users in the current workspace.
+
+        Returns:
+            A list of `ServiceUserInfo` dataclasses.
+
+        Examples:
+
+        ```python notest
+        ws = modal.Workspace.from_context()
+        for service_user in ws.service_users.list():
+            print(service_user.name)
+        ```
+        """
+
+        if not self._workspace._is_hydrated:
+            await self._workspace.hydrate()
+
+        resp = await self._workspace.client._stub.ServiceUserList(Empty())
+
+        return [ServiceUserInfo._from_proto(su) for su in resp.service_users]
+
+    async def delete(self, name: str, *, allow_missing: bool = False) -> None:
+        """Permanently delete a Service User.
+
+        Args:
+            name: The name of the Service User to delete.
+            allow_missing: If `True`, do not throw an exception if the Service User does not exist.
+
+        Examples:
+
+        ```python notest
+        ws = modal.Workspace.from_context()
+        ws.service_users.delete("test-service-user")
+        ```
+        """
+
+        if not self._workspace._is_hydrated:
+            await self._workspace.hydrate()
+
+        try:
+            await self._workspace.client._stub.ServiceUserDelete(
+                api_pb2.ServiceUserDeleteRequest(service_user_name=name)
+            )
+        except NotFoundError:
+            if not allow_missing:
+                raise

modal/cli/import_refs.py

@@ -7,11 +7,14 @@ or the app lookup of `modal deploy some_file.py`.
 These functions are only called by the Modal CLI, not in tasks.
 """
 
+import atexit
 import dataclasses
 import importlib
 import importlib.util
 import inspect
+import shutil
 import sys
+import tempfile
 import typing
 from collections import defaultdict
 from dataclasses import dataclass
@@ -60,15 +63,40 @@ def parse_import_ref(object_ref: str, use_module_mode: bool = False, command: st
 
 DEFAULT_APP_NAME = "app"
 
+STDIN_REF = "-"
+STDIN_MODULE_NAME = "modal_stdin_app"
 
-def import_file_or_module(import_ref: ImportRef, base_cmd: str = ""):
+
+def _write_stdin_script() -> str:
+    if sys.stdin is None or sys.stdin.isatty():
+        raise InvalidError("No script was piped on stdin. Usage: `cat my_app.py | modal run -`")
+    source = sys.stdin.read()
+    # The file must outlive the import: the entrypoint mount is built from it when the App runs.
+    tmp_dir = tempfile.mkdtemp(prefix="modal-stdin-")
+    atexit.register(shutil.rmtree, tmp_dir, ignore_errors=True)
+    script_path = Path(tmp_dir) / f"{STDIN_MODULE_NAME}.py"
+    script_path.write_text(source)
+    return str(script_path)
+
+
+def import_file_or_module(import_ref: ImportRef, base_cmd: str = "", allow_stdin: bool = False):
     if "" not in sys.path:
         # When running from a CLI like `modal run`
         # the current working directory isn't added to sys.path
         # so we add it in order to make module path specification possible
         sys.path.insert(0, "")  # "" means the current working directory
 
-    if not import_ref.file_or_module.endswith(".py") or import_ref.use_module_mode:
+    from_stdin = import_ref.file_or_module == STDIN_REF
+    if from_stdin:
+        if not allow_stdin:
+            raise InvalidError(f"`{base_cmd}` does not support reading a script from stdin.")
+        if import_ref.use_module_mode:
+            raise InvalidError("Reading a script from stdin (`-`) can't be combined with the -m flag.")
+        script_path = _write_stdin_script()
+    else:
+        script_path = import_ref.file_or_module
+
+    if not script_path.endswith(".py") or import_ref.use_module_mode:
         if not import_ref.use_module_mode:
             raise InvalidError(
                 "Python module paths must be specified with the -m flag. "
@@ -82,7 +110,7 @@ def import_file_or_module(import_ref: ImportRef, base_cmd: str = ""):
     else:
         # when using a script path, that scripts directory should also be on the path as it is
         # with `python some/script.py`
-        full_path = Path(import_ref.file_or_module).resolve()
+        full_path = Path(script_path).resolve()
         if "." in full_path.name.removesuffix(".py"):
             raise InvalidError(
                 f"Invalid Modal source filename: {full_path.name!r}."
@@ -90,10 +118,10 @@ def import_file_or_module(import_ref: ImportRef, base_cmd: str = ""):
             )
         sys.path.insert(0, str(full_path.parent))
 
-        module_name = inspect.getmodulename(import_ref.file_or_module)
+        module_name = inspect.getmodulename(script_path)
         assert module_name is not None
         # Import the module - see https://docs.python.org/3/library/importlib.html#importing-a-source-file-directly
-        spec = importlib.util.spec_from_file_location(module_name, import_ref.file_or_module)
+        spec = importlib.util.spec_from_file_location(module_name, script_path)
         assert spec is not None
         module = importlib.util.module_from_spec(spec)
         sys.modules[module_name] = module
@@ -103,7 +131,7 @@ def import_file_or_module(import_ref: ImportRef, base_cmd: str = ""):
                 spec.loader.exec_module(module)
         except Exception as exc:
             if isinstance(exc, ImportError) and "attempted relative import with no known parent package" in str(exc):
-                if import_ref.file_or_module and import_ref.command and not import_ref.use_module_mode:
+                if import_ref.command and not import_ref.use_module_mode and not from_stdin:
                     file_path = Path(import_ref.file_or_module)
                     suggested_module_path = ".".join(file_path.parts).removesuffix(".py").lstrip(".")
                     suffix = f"::{import_ref.object_path}" if import_ref.object_path else ""
@@ -356,6 +384,7 @@ def import_and_filter(
     accept_local_entrypoint=True,
     accept_webhook=False,
     accept_service_functions=False,
+    allow_stdin=False,
 ) -> tuple[Runnable | None, list[CLICommand]]:
     """Takes a function ref string and returns a single determined "runnable" to use, and a list of all available
     runnables.
@@ -371,7 +400,7 @@ def import_and_filter(
     3. if there is a single method (within a class) that one is used
     """
     # all commands:
-    module = import_file_or_module(import_ref, base_cmd)
+    module = import_file_or_module(import_ref, base_cmd, allow_stdin=allow_stdin)
     cli_commands = list_cli_commands(
         dict(inspect.getmembers(module)),
         include_service_functions=accept_service_functions,

modal/cli/run.py

@@ -2,7 +2,9 @@
 import asyncio
 import functools
 import inspect
+import os
 import re
+import stat
 import sys
 import time
 import typing
@@ -25,6 +27,7 @@ from ..runner import DEPLOYMENT_STRATEGY_TYPE, deploy_app, run_app
 from ..serving import serve_app
 from ._help import ModalCommand, ModalGroup, _consume_global_options, _global_option_token_length
 from .import_refs import (
+    STDIN_REF,
     CLICommand,
     MethodReference,
     _get_runnable_app,
@@ -399,6 +402,14 @@ def _get_click_command_for_local_entrypoint(app: App, entrypoint: LocalEntrypoin
         return click.command(cls=ModalCommand)(with_click_options)
 
 
+def _stdin_is_piped() -> bool:
+    try:
+        mode = os.fstat(sys.stdin.fileno()).st_mode
+    except (AttributeError, OSError, ValueError):
+        return False
+    return stat.S_ISFIFO(mode) or stat.S_ISREG(mode)
+
+
 def _get_runnable_list(all_usable_commands: list[CLICommand]) -> str:
     usable_command_lines = []
     for cmd in all_usable_commands:
@@ -428,6 +439,8 @@ class RunGroup(ModalGroup):
             elif arg == "--":
                 func_ref_index += 1
                 break
+            elif arg == STDIN_REF:
+                break
             elif param := option_params.get(arg.split("=", 1)[0]):
                 func_ref_index += 1 if "=" in arg or param.is_flag else param.nargs + 1
             elif arg.startswith("-"):
@@ -435,6 +448,14 @@ class RunGroup(ModalGroup):
             else:
                 break
 
+        missing_func_ref = func_ref_index >= len(args)
+        requests_help = any(arg in ctx.help_option_names for arg in args)
+        if missing_func_ref and not requests_help and not ctx.resilient_parsing and _stdin_is_piped():
+            raise click.UsageError(
+                f"Missing FUNC_REF. To read the script from stdin, pass `{STDIN_REF}`: `cat my_app.py | modal run -`",
+                ctx,
+            )
+
         args[:] = _consume_global_options(ctx, args[:func_ref_index]) + args[func_ref_index:]
         return click.Group.parse_args(self, ctx, args)
 
@@ -448,9 +469,23 @@ class RunGroup(ModalGroup):
         func_ref = cmd_name
 
         import_ref = parse_import_ref(func_ref, use_module_mode=ctx.params["m"], command="modal run")
+        from_stdin = import_ref.file_or_module == STDIN_REF
+        if from_stdin and ctx.params["interactive"]:
+            raise ClickException("Interactive mode can't be used when reading a script from stdin.")
         runnable, all_usable_commands = import_and_filter(
-            import_ref, base_cmd="modal run", accept_local_entrypoint=True, accept_webhook=False
+            import_ref, base_cmd="modal run", accept_local_entrypoint=True, accept_webhook=False, allow_stdin=True
         )
+        if not runnable and from_stdin:
+            help_header = (
+                "Couldn't determine what to run from the script on stdin. Define a single "
+                "`@app.local_entrypoint()`, or save the script to a file and pass `my_app.py::my_function`."
+            )
+            if all_usable_commands:
+                help_footer = "The script has the following functions and local entrypoints:\n"
+                help_footer += _get_runnable_list(all_usable_commands)
+            else:
+                help_footer = "The script has no functions or local entrypoints."
+            raise ClickException(f"{help_header}\n\n{help_footer}")
         if not runnable:
             help_header = (
                 "Specify a Modal Function or local entrypoint to run. E.g.\n"
@@ -535,6 +570,21 @@ def run(
     ```
     modal run -m my_project.my_app
     ```
+
+    Pass `-` to read the script from stdin. The script must have a single local
+    entrypoint (or a single function):
+
+    ```
+    modal run - <<'EOF'
+    import modal
+
+    app = modal.App()
+
+    @app.function()
+    def hello():
+        print("hello from Modal")
+    EOF
+    ```
     """
     ctx.ensure_object(dict)
     ctx.obj["name"] = name

modal/cli/workspace.py

@@ -1,15 +1,21 @@
 # Copyright Modal Labs 2025
 import json as json_mod
+from datetime import timezone
 
 import click
 import rich
 import rich.box
 import rich.table
+from rich.box import SIMPLE, SIMPLE_HEAD
+from rich.text import Text
 
-from modal._utils.time_utils import timestamp_to_localized_str
+from modal._utils.async_utils import synchronizer
+from modal._utils.time_utils import parse_duration, timestamp_to_localized_str
+from modal._workspace import _Workspace
 from modal.cli.utils import confirm_or_suggest_yes, display_table, yes_option
 from modal.output import OutputManager
 from modal.workspace import Workspace
+from modal_proto import api_pb2
 
 from ._help import ModalGroup
 
@@ -267,3 +273,361 @@ def settings_set(setting: str, value: str):
     except Exception as e:
         rich.print(f"[red]✗[/red] {setting}: {e}")
         raise SystemExit(1)
+
+
+SERVICE_USERS_HELP_TEXT = """Manage Service Users. Must be workspace manager or owner.
+
+Service users are programmatic accounts that allow automated systems to interact with Modal. They're
+ideal for CI/CD pipelines, automated deployments, and other workflows that need to authenticate.
+
+Service User credentials are typically made available to a process as environment variables:
+
+```
+export MODAL_TOKEN_ID=your-token-id
+export MODAL_TOKEN_SECRET=your-token-secret
+```
+
+A newly created Service User has no permissions by default. In order to interact with a specific
+Environment, Service Users must be granted explicit permissions.
+
+See https://modal.com/docs/guide/service-users for more information.
+"""
+
+service_users_cli = ModalGroup(name="service-users", help=SERVICE_USERS_HELP_TEXT)
+workspace_cli.add_command(service_users_cli)
+
+
+@service_users_cli.command("create", no_args_is_help=True)
+@click.argument("name")
+@click.option(
+    "--expires-in",
+    "expires_in_str",
+    default=None,
+    help="Expiration time. Accepts integers (interpreted as seconds), as well as values suffixed by "
+    "`s`, `m`, `h`, or `d`.",
+)
+@click.option("--json", "json", is_flag=True, default=False, help="Output as JSON.")
+@synchronizer.create_blocking
+async def service_users_create(name: str, expires_in_str: str | None, json: bool):
+    """Create a Service User in this workspace.
+
+    In order to run this command, you must have at least Manager level permissions in the Workspace.
+
+    By default, Service Users have no permissions. To explicitly grant the Service User permissions
+    to interact with a given environment, use [`modal workspace service-users set-role`](https://modal.com/docs/cli/latest/workspace#modal-workspace-service-users-set-role)
+    or [`modal environment roles update`](https://modal.com/docs/cli/latest/environment#modal-environment-roles-update).
+
+    Optionally, you can also specify an expiration window by passing `--expires-in`. After the specified
+    amount of time elapses, this Service User will be deleted, and any credentials associated with
+    this Service User will stop working. The option expects a positive integer value, optionally
+    suffixed by the units `s`, `m`, `h`, or `d`, meaning seconds, minutes, hours, and days respectively.
+    If no suffix is provided, the value is interpreted as seconds. If `--expires-in` is not provided,
+    the newly created Service User will never expire.
+
+    Examples:
+
+    ```bash
+    # Create a Service User named `test-1`, which never expires:
+    modal workspace service-users create test-1
+
+    # Two ways of creating a Service User which is valid for an hour:
+    modal workspace service-users create test-2 --expires-in 3600
+    modal workspace service-users create test-3 --expires-in 1h
+
+    # Create a Service User which is valid for 1 year, outputting JSON:
+    modal workspace service-users create test-4 --expires-in 365d --json
+    ```
+    """
+
+    expires_in: int | None
+    if expires_in_str is None:
+        expires_in = None
+    else:
+        try:
+            expires_in = int(expires_in_str)
+        except ValueError:
+            try:
+                expires_in = int(parse_duration(expires_in_str).total_seconds())
+            except ValueError as e:
+                raise click.UsageError(str(e)) from e
+
+    if expires_in is not None and expires_in <= 0:
+        raise click.UsageError("Value passed to `--expires-in` must be a positive integer.")
+
+    if expires_in is None:
+        req = api_pb2.ServiceUserCreateRequest(name=name)
+    else:
+        req = api_pb2.ServiceUserCreateRequest(name=name, expires_in_seconds=expires_in)
+
+    ws = _Workspace.from_context()
+    await ws.hydrate()
+
+    resp = await ws.client._stub.ServiceUserCreate(req)
+
+    output_manager = OutputManager.get()
+
+    if json:
+        output_manager.print_json(
+            json_mod.dumps(
+                {
+                    "token_id": resp.token_id,
+                    "token_secret": resp.token_secret,
+                    "expires_at": timestamp_to_localized_str(resp.expires_at.ToDatetime(timezone.utc).timestamp())
+                    if expires_in
+                    else None,
+                }
+            )
+        )
+        return
+
+    output_manager.print(f"[green]✓[/green] Successfully created Service User `{name}`, token details below:")
+
+    table = rich.table.Table("", pad_edge=False, box=None)
+    table.add_row("Token ID:", resp.token_id)
+    table.add_row("Token Secret:", resp.token_secret)
+
+    if expires_in:
+        table.add_row(
+            "Expires At:", timestamp_to_localized_str(resp.expires_at.ToDatetime(timezone.utc).timestamp(), isotz=False)
+        )
+
+    output_manager.print(table)
+    output_manager.print("")
+
+    output_manager.print("[yellow]:warning:[/yellow] This is the only time you will be able to see the Token Secret.")
+
+
+@service_users_cli.command("list")
+@click.option("--json", is_flag=True, default=False, help="Output as JSON.")
+def service_users_list(json: bool):
+    """List all Service Users in this workspace.
+
+    In order to run this command, you must have at least Manager level permissions in the Workspace.
+
+    Examples:
+
+    ```bash
+    # List all Service Users with a human-readable output format
+    modal workspace service-users list
+
+    # List all Service Users and return JSON output
+    modal workspace service-users list --json
+    ```
+    """
+
+    ws = Workspace.from_context()
+    service_users = ws.service_users.list()
+
+    output_manager = OutputManager.get()
+
+    if json:
+        output_manager.print_json(
+            json_mod.dumps(
+                [
+                    {
+                        "name": su.name,
+                        "service_user_id": su.service_user_id,
+                        "token_id": su.token_id,
+                        "created_by": su.created_by,
+                        "created_at": timestamp_to_localized_str(su.created_at.timestamp()),
+                        "last_used_at": timestamp_to_localized_str(su.last_used_at.timestamp())
+                        if su.last_used_at is not None
+                        else None,
+                        "expires_at": timestamp_to_localized_str(su.expires_at.timestamp())
+                        if su.expires_at is not None
+                        else None,
+                        "environment_roles": su.environment_roles,
+                    }
+                    for su in service_users
+                ]
+            )
+        )
+        return
+
+    table = rich.table.Table(box=SIMPLE_HEAD)
+    table.add_column("Name")
+    table.add_column("Token ID")
+    table.add_column("Created By")
+    table.add_column("Expires")
+
+    for su in service_users:
+        table.add_row(
+            su.name,
+            su.token_id,
+            su.created_by,
+            timestamp_to_localized_str(su.expires_at.timestamp(), isotz=False) if su.expires_at is not None else "-",
+        )
+
+    output_manager.print(table)
+
+
+@service_users_cli.command("delete", no_args_is_help=True)
+@click.argument("name")
+@click.option("--allow-missing", is_flag=True, default=False, help="Don't error if the Volume doesn't exist.")
+@yes_option
+def service_users_delete(name: str, *, allow_missing: bool, yes: bool):
+    """Delete a Service User in this Workspace.
+
+    Note that this action is irreversible. Any existing processes / scripts that use the credentials
+    associated with the target Service User will stop being able to authenticate with Modal.
+
+    ```bash
+    # Delete the Service User named `test-service-user`
+    modal workspace service-users delete test-service-user
+    ```
+    """
+    if not yes:
+        confirm_or_suggest_yes(
+            f"Are you sure you want to irrevocably delete the Service User '{name}' and its associated credentials?"
+        )
+
+    ws = Workspace.from_context()
+    ws.service_users.delete(name, allow_missing=allow_missing)
+
+    output_manager = OutputManager.get()
+    output_manager.print(f"[green]✓[/green] Deleted Service User `{name}`.")
+
+
+@service_users_cli.command("info", no_args_is_help=True)
+@click.argument("name")
+@click.option("--json", is_flag=True, default=False, help="Output as JSON.")
+def service_users_info(name: str, json: bool):
+    """Inspect a Service User in this workspace.
+
+    Examples:
+
+    ```bash
+    # Inspect the Service User named `test-service-user`
+    modal workspace service-users info test-service-user
+
+    # Inspect the Service User named `test-service-user-2`, outputting JSON
+    modal workspace service-users info test-service-user-2 --json
+    ```
+    """
+
+    ws = Workspace.from_context()
+    su = ws.service_users.info(name)
+
+    output_manager = OutputManager.get()
+    if json:
+        output_manager.print_json(
+            json_mod.dumps(
+                {
+                    "name": su.name,
+                    "service_user_id": su.service_user_id,
+                    "token_id": su.token_id,
+                    "created_by": su.created_by,
+                    "created_at": timestamp_to_localized_str(su.created_at.timestamp()),
+                    "last_used_at": timestamp_to_localized_str(su.last_used_at.timestamp())
+                    if su.last_used_at is not None
+                    else None,
+                    "expires_at": timestamp_to_localized_str(su.expires_at.timestamp())
+                    if su.expires_at is not None
+                    else None,
+                    "environment_roles": su.environment_roles,
+                }
+            )
+        )
+        return
+
+    rows: list[tuple[str, str]] = []
+
+    rows.append(("Name:", su.name))
+    rows.append(("Service User ID:", su.service_user_id))
+    rows.append(("Token ID:", su.token_id))
+
+    environment_roles: list[tuple[str, str]] = []
+    for env_name, role in su.environment_roles.items():
+        if role == "no-access":
+            continue
+
+        environment_roles.append((env_name, role))
+
+    rows.append(("Created By:", su.created_by))
+    rows.append(("Created At:", str(timestamp_to_localized_str(su.created_at.timestamp(), isotz=False))))
+    rows.append(
+        (
+            "Last Used:",
+            str(timestamp_to_localized_str(su.last_used_at.timestamp(), isotz=False))
+            if su.last_used_at is not None
+            else "-",
+        )
+    )
+    rows.append(
+        (
+            "Expires:",
+            str(timestamp_to_localized_str(su.expires_at.timestamp(), isotz=False))
+            if su.expires_at is not None
+            else "-",
+        )
+    )
+
+    if len(environment_roles) > 0:
+        rows.append(("", ""))
+        rows.append(("Environment Access:", ""))
+        for env_name, r in environment_roles:
+            rows.append((f"  {env_name}", r.capitalize()))
+
+    if len(environment_roles) == 0:
+        output_manager.print("")
+        output_manager.print("  [yellow]:warning:[/yellow] This Service User does not have access to any Environments.")
+
+    table = rich.table.Table(box=SIMPLE, show_header=False)
+    for row in rows:
+        left, right = row
+        table.add_row(left, Text(right, justify="right"))
+
+    output_manager.print(table)
+
+
+@service_users_cli.command("set-role", no_args_is_help=True)
+@click.argument("service_user_name")
+@click.argument("environment_name")
+@click.argument("role")
+def service_users_set_role(
+    service_user_name: str,
+    environment_name: str,
+    role: str,
+):
+    """Update a Service User's role in a specific Environment.
+
+    Examples:
+
+    ```bash
+    # Give Contributor access in Environment `main` to Service User `test-service-user`
+    modal workspace service-users set-role test-service-user main contributor
+
+    # Revoke access to Environment `prod` from Service User `test-service-user`
+    modal workspace service-users set-role test-service-user prod no-access
+    ```
+    """
+
+    ws = Workspace.from_context()
+    info = ws.service_users.info(service_user_name)
+
+    existing_role = info.environment_roles.get(environment_name) or "no-access"
+
+    ws.service_users.set_role(service_user_name, environment_name, role=role)
+
+    output_manager = OutputManager.get()
+    if role == existing_role:
+        if role == "no-access":
+            output_manager.print(
+                f"Service User [bold]{service_user_name}[/bold] does not have access to "
+                f"Environment [bold]{environment_name}[/bold] already. Role was not updated."
+            )
+        else:
+            output_manager.print(
+                f"Service User [bold]{service_user_name}[/bold] is already a {role.capitalize()} in "
+                f"Environment [bold]{environment_name}[/bold]. Role was not updated."
+            )
+    elif role == "no-access":
+        output_manager.print(
+            f"[green]✓[/green] Revoked Service User [bold]{service_user_name}[/bold]'s access to "
+            f"Environment [bold]{environment_name}[/bold]."
+        )
+    else:
+        output_manager.print(
+            f"[green]✓[/green] Updated Service User [bold]{service_user_name}[/bold]'s role in "
+            f"Environment [bold]{environment_name}[/bold] to {role.capitalize()}."
+        )

modal/client.pyi

@@ -80,7 +80,7 @@ class _Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.6.2.dev8",
+        version: str = "1.6.2.dev10",
         *,
         oauth_credentials: typing.Optional[_OAuthCredentials] = None,
     ):
@@ -290,7 +290,7 @@ class Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.6.2.dev8",
+        version: str = "1.6.2.dev10",
         *,
         oauth_credentials: typing.Optional[_OAuthCredentials] = None,
     ):

modal/types.py

@@ -441,6 +441,43 @@ class TokenData:
     token_secret: str
 
 
+@dataclass(frozen=True)
+class ServiceUserInfo:
+    """A lightweight dataclass containing metadata about a Modal Service User."""
+
+    service_user_id: str
+    name: str
+    token_id: str
+    created_by: str
+    created_at: datetime
+    last_used_at: datetime | None
+    expires_at: datetime | None
+
+    # Environment Name -> Role
+    environment_roles: dict[str, str]
+
+    @classmethod
+    def _from_proto(cls, proto: api_pb2.ServiceUser) -> "ServiceUserInfo":
+        created_at = datetime.fromtimestamp(proto.created_at, tz=timezone.utc)
+        last_used_at = datetime.fromtimestamp(proto.last_used_at, tz=timezone.utc) if proto.last_used_at else None
+        expires_at = datetime.fromtimestamp(proto.expires_at, tz=timezone.utc) if proto.expires_at else None
+
+        environment_roles: dict[str, str] = {}
+        for item in proto.environment_roles:
+            environment_roles[item.environment_name] = item.role_str
+
+        return cls(
+            service_user_id=proto.service_user_id,
+            name=proto.name,
+            token_id=proto.token_id,
+            created_by=proto.created_by,
+            created_at=created_at,
+            last_used_at=last_used_at,
+            expires_at=expires_at,
+            environment_roles=environment_roles,
+        )
+
+
 @dataclass(frozen=True)
 class ProxyTokenInfo:
     """Metadata about a proxy token, not including the token secret."""

modal/workspace.py

@@ -9,6 +9,7 @@ from ._workspace import (
     _WorkspaceBillingManager,
     _WorkspaceMembersManager,
     _WorkspaceProxyTokenManager,
+    _WorkspaceServiceUserManager,
     _WorkspaceSettingsManager,
 )
 
@@ -17,6 +18,7 @@ WorkspaceMembersManager = synchronize_api(_WorkspaceMembersManager, target_modul
 WorkspaceBillingManager = synchronize_api(_WorkspaceBillingManager, target_module=__name__)
 WorkspaceProxyTokenManager = synchronize_api(_WorkspaceProxyTokenManager, target_module=__name__)
 WorkspaceSettingsManager = synchronize_api(_WorkspaceSettingsManager, target_module=__name__)
+WorkspaceServiceUserManager = synchronize_api(_WorkspaceServiceUserManager, target_module=__name__)
 
 __all__ = [
     "ProxyTokenInfo",
@@ -25,6 +27,7 @@ __all__ = [
     "WorkspaceMemberInfo",
     "WorkspaceMembersManager",
     "WorkspaceProxyTokenManager",
+    "WorkspaceServiceUserManager",
     "WorkspaceSettingsManager",
     "WorkspaceSettings",
 ]

modal/workspace.pyi

@@ -186,6 +186,15 @@ class Workspace(modal.object.Object):
         """Namespace for Workspace settings APIs."""
         ...
 
+    @property
+    def service_users(self) -> WorkspaceServiceUserManager:
+        """Namespace for managing Service Users in a Workspace.
+
+        See [the guide](https://modal.com/docs/guide/service-users) for more information about Service
+        Users.
+        """
+        ...
+
 class WorkspaceMembersManager:
     """mdmd:namespace"""
     def __init__(self, workspace: Workspace):
@@ -720,3 +729,230 @@ class WorkspaceSettingsManager:
             ...
 
     set: __set_spec
+
+class WorkspaceServiceUserManager:
+    """mdmd:namespace"""
+    def __init__(self, workspace: Workspace):
+        """mdmd:hidden"""
+        ...
+
+    class __create_spec(typing_extensions.Protocol):
+        def __call__(self, /, name: str, *, expires_in: typing.Optional[int]) -> modal.types.TokenData:
+            """Create a new Service User in the current workspace.
+
+            To call this function, you are required to have Manager permissions in the Workspace.
+
+            Args:
+                name: The name of the new Service User. Must consistent only of alphanumeric, '-', or '_'
+                    characters.
+                expires_in: An expiration time, in seconds, after which the token will stop working. If
+                    `None`, the token will never expire.
+
+            Returns:
+                A `TokenData` dataclass containing the credentials for the Service User. Note that this
+                is the only time you will be able to view these credentials.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+
+            # Creates a Service User named "test-service-user", whose credentials expire after one year.
+            service_user_token_data = ws.service_users.create(
+                "test-service-user",
+                expires_in=datetime.timedelta(days=365).total_seconds(),
+            )
+            ```
+            """
+            ...
+
+        async def aio(self, /, name: str, *, expires_in: typing.Optional[int]) -> modal.types.TokenData:
+            """Create a new Service User in the current workspace.
+
+            To call this function, you are required to have Manager permissions in the Workspace.
+
+            Args:
+                name: The name of the new Service User. Must consistent only of alphanumeric, '-', or '_'
+                    characters.
+                expires_in: An expiration time, in seconds, after which the token will stop working. If
+                    `None`, the token will never expire.
+
+            Returns:
+                A `TokenData` dataclass containing the credentials for the Service User. Note that this
+                is the only time you will be able to view these credentials.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+
+            # Creates a Service User named "test-service-user", whose credentials expire after one year.
+            service_user_token_data = ws.service_users.create(
+                "test-service-user",
+                expires_in=datetime.timedelta(days=365).total_seconds(),
+            )
+            ```
+            """
+            ...
+
+    create: __create_spec
+
+    class __set_role_spec(typing_extensions.Protocol):
+        def __call__(self, /, service_user_name: str, environment_name: str, *, role: str) -> None:
+            """Set the role of a specified Service User within an Environment.
+
+            To call this function, you are required to have Manager permissions in the Workspace.
+
+            Args:
+                service_user_name: The name of the Service User.
+                environment_name: The name of the Environment to which the Service User's new role will
+                    apply.
+                role: The access level to grant this Service User.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            # Grants Service User "test-service-user" the Viewer role in Environment "production"
+            ws.service_users.set_role("test-service-user", "production", role="viewer")
+
+            # Revokes access to "production" from Service User "test-service-user"
+            ws.service_users.set_role("test-service-user", "production", role="no-access")
+            ```
+            """
+            ...
+
+        async def aio(self, /, service_user_name: str, environment_name: str, *, role: str) -> None:
+            """Set the role of a specified Service User within an Environment.
+
+            To call this function, you are required to have Manager permissions in the Workspace.
+
+            Args:
+                service_user_name: The name of the Service User.
+                environment_name: The name of the Environment to which the Service User's new role will
+                    apply.
+                role: The access level to grant this Service User.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            # Grants Service User "test-service-user" the Viewer role in Environment "production"
+            ws.service_users.set_role("test-service-user", "production", role="viewer")
+
+            # Revokes access to "production" from Service User "test-service-user"
+            ws.service_users.set_role("test-service-user", "production", role="no-access")
+            ```
+            """
+            ...
+
+    set_role: __set_role_spec
+
+    class __info_spec(typing_extensions.Protocol):
+        def __call__(self, /, name: str) -> modal.types.ServiceUserInfo:
+            """Get information about a specific Service User.
+
+            Args:
+                name: The name of the Service User to introspect.
+
+            Returns:
+                A `ServiceUserInfo` dataclass containing information about the Service User.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            service_user = ws.service_users.info("test-service-user")
+            ```
+            """
+            ...
+
+        async def aio(self, /, name: str) -> modal.types.ServiceUserInfo:
+            """Get information about a specific Service User.
+
+            Args:
+                name: The name of the Service User to introspect.
+
+            Returns:
+                A `ServiceUserInfo` dataclass containing information about the Service User.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            service_user = ws.service_users.info("test-service-user")
+            ```
+            """
+            ...
+
+    info: __info_spec
+
+    class __list_spec(typing_extensions.Protocol):
+        def __call__(self, /) -> list[modal.types.ServiceUserInfo]:
+            """List all Service Users in the current workspace.
+
+            Returns:
+                A list of `ServiceUserInfo` dataclasses.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            for service_user in ws.service_users.list():
+                print(service_user.name)
+            ```
+            """
+            ...
+
+        async def aio(self, /) -> list[modal.types.ServiceUserInfo]:
+            """List all Service Users in the current workspace.
+
+            Returns:
+                A list of `ServiceUserInfo` dataclasses.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            for service_user in ws.service_users.list():
+                print(service_user.name)
+            ```
+            """
+            ...
+
+    list: __list_spec
+
+    class __delete_spec(typing_extensions.Protocol):
+        def __call__(self, /, name: str, *, allow_missing: bool = False) -> None:
+            """Permanently delete a Service User.
+
+            Args:
+                name: The name of the Service User to delete.
+                allow_missing: If `True`, do not throw an exception if the Service User does not exist.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            ws.service_users.delete("test-service-user")
+            ```
+            """
+            ...
+
+        async def aio(self, /, name: str, *, allow_missing: bool = False) -> None:
+            """Permanently delete a Service User.
+
+            Args:
+                name: The name of the Service User to delete.
+                allow_missing: If `True`, do not throw an exception if the Service User does not exist.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            ws.service_users.delete("test-service-user")
+            ```
+            """
+            ...
+
+    delete: __delete_spec

{modal-1.6.2.dev8.dist-info → modal-1.6.2.dev10.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modal
-Version: 1.6.2.dev8
+Version: 1.6.2.dev10
 Summary: Python client library for Modal
 Author-email: Modal Labs <support@modal.com>
 License-Expression: Apache-2.0

{modal-1.6.2.dev8.dist-info → modal-1.6.2.dev10.dist-info}/RECORD

@@ -32,14 +32,14 @@ modal/_tunnel.py,sha256=4M1qLFXvJLV2s_vr5vHXDtGdZr0OUNmXNj1C3lyF4qE,7360
 modal/_tunnel.pyi,sha256=WVP0dkoN__mM73ZQ-r3nHKCXvYlRMmEWW8iw2xrSY6M,14698
 modal/_type_manager.py,sha256=DWjgmjYJuOagw2erin506UUbG2H5UzZCFEekS-7hmfA,9087
 modal/_watcher.py,sha256=Ot1My6fhTp5v0NXR7-ESV8kNQqvpgozrIcvLBtf5r-U,3564
-modal/_workspace.py,sha256=IfjcknvmWKVqiltkvHFKVBAKi2EVo-nMOTVKlWCOll4,21849
+modal/_workspace.py,sha256=HgV--qq7SDc4v5fcogoUdypPTA9MXh2w998J5iQ1Zao,27830
 modal/app.py,sha256=tAILXi3rk-d2KgdLKGMsB7awShiPBcPfEfiPLn1fGQY,74703
 modal/app.pyi,sha256=TjcJhoWwZTK2eQ_HCIChU62xSdLi6SvHVQYksy-eZ7w,88565
 modal/billing.py,sha256=E1-P_P8bJFLp-bTaggYd4BaaViImPB5UdtXiY8VeAZQ,390
 modal/billing.pyi,sha256=4m7VLYNS8IiJ2I3CJx0awvrOM6BILWRVLfdeqtAYr8M,7189
 modal/call_graph.py,sha256=XGALIDn1bLchWo_goyX23bcPjzCZcfqKUo8INIfDapo,1775
 modal/client.py,sha256=cstrL0wpXCZmcvRs7Sy3QRw9Vz8zkZy8NNk0tPe38sk,22852
-modal/client.pyi,sha256=5VcbRBy5EfVsMzw0sU9MFtyymwPi6LKigWuAYqzSums,23488
+modal/client.pyi,sha256=FIs-LOX3P2SlgWbBi0iRAAeqRM-7pRxdSXrdFK2jai0,23490
 modal/cloud_bucket_mount.py,sha256=ZOg69dhIFcJcwim4JP-6s1tqwOYAfgS9806jRpspifw,7511
 modal/cloud_bucket_mount.pyi,sha256=HoPe_NG5jYdVfmTNY-ZJ3-C8Eo_FzJovl9orJRjkGbE,10252
 modal/cls.py,sha256=qoGJD590GnHHLvVhkn-BMl4ATMrw2Fg_V4evy5ZQbJQ,41784
@@ -92,11 +92,11 @@ modal/serving.pyi,sha256=nKgt3i2X93NpAAZzIpbj4fiR1TIJxSXnK659w4UD2sE,3962
 modal/stream_type.py,sha256=A6320qoAAWhEfwOCZfGtymQTu5AfLfJXXgARqooTPvY,417
 modal/token_flow.py,sha256=1Os7Zw41Fh_YU8CMSWRILDKRlUZcl9pExaX_EDVdBiU,7446
 modal/token_flow.pyi,sha256=nqs_KHmwM-ssXKeWUTnMVjOgliSzZLl30Tcg6VvMzG0,2605
-modal/types.py,sha256=dF7Tm2sV2gmi6Vv7oHzQdzNmVIHgUywIfqy7vYJ-Fh4,36199
+modal/types.py,sha256=LuOQoaDt8T-1i2XOfXzy3Ym1yxHEZ08HTszhGddvCvI,37474
 modal/volume.py,sha256=wbTVEriIv3djjeUAuUWkLABgG4ppbNMmXLJeV0bev3Q,71117
 modal/volume.pyi,sha256=Rp2gw_zh8HAAHRbdDkF782tttQfyv3uzSriO-zpMXDU,67350
-modal/workspace.py,sha256=_phlb1Bxie_KR1Y9atBzkB21Q_qmRztf1JLzQYdK0qk,988
-modal/workspace.pyi,sha256=X3wZ5GWrIpxJVxya4NDKvzdxJqGRhsoc1wNgKSMOySg,26497
+modal/workspace.py,sha256=83AGrCXEN1-QhC6XfQusgWO50GOIJX_c1QKsF52wjdA,1157
+modal/workspace.pyi,sha256=IfyKAkNmnFi-lMVBDuykPu2UTi7kg7495kmZ4w7yiYY,35009
 modal/_output/__init__.py,sha256=xtGN6SPv2zvByrJ32JPao0yJKpxyCIZ-2JMTScrisuQ,28
 modal/_output/manager.py,sha256=DqEguniI8uWMFUZFX4U4gsCFpio1zQeWjJhJC_GZhi4,18286
 modal/_output/pty.py,sha256=ngkKVpU8zDOxg94LiWYmdwXavd305HQDXzjWGrHQBIM,10408
@@ -175,12 +175,12 @@ modal/cli/entry_point.py,sha256=Sy9w9C2RHG9XDalJ0Fjwr4yQc4dTEL9gVNQuDrj3woI,5050
 modal/cli/environment.py,sha256=rKnKQFsbcLXjBtYWLFRqhP1NeCjMnqvSPci7Md4ZjIM,18377
 modal/cli/function.py,sha256=gyY7cgwfxZfNRwyO1X4I1XK8xL97heoEp7CuVwPrRoI,57624
 modal/cli/image.py,sha256=Ve-PDT4XTH9KEQrZxvUc2ocAW4mLI5QfwQssaajK4MI,8073
-modal/cli/import_refs.py,sha256=gxoogHVixec1-qj_FUwhWQXqjy9yvqYCNuAYWCCFEWk,15994
+modal/cli/import_refs.py,sha256=cI9njDM4alDawlgAGsFLBQ6eP7K06aFHOp0-K7OSd_8,17093
 modal/cli/logo.py,sha256=plv82syvPb8j3qrR1A_nojZwp823t3VEXaDlrx1jkt0,3221
 modal/cli/network_file_system.py,sha256=xNvau_6fziIfbPIlVGAh1-wOGVCNko28GweAjO51LCU,7681
 modal/cli/profile.py,sha256=JbpSo5bcK2gdVx3QDrGWwnfRRG-_QtrsLAaQXnwh4K0,4782
 modal/cli/queues.py,sha256=cpoza1mEwupQoaBy7kaTqsTaWPto9tHRQrOeLXxZAUU,6951
-modal/cli/run.py,sha256=rzLG_eDO4uxcIxPQsz_PbGe8MZTcPNzA3p83HDFEcUk,24508
+modal/cli/run.py,sha256=rkAsn4aDa80JjMj1rwGwrVdlkJkazclSyvar7YSmi3Y,26410
 modal/cli/secret.py,sha256=lckWyas1J3uQm1f8D9nkWlRlmToNzmy5a-0q4IsJFCc,8254
 modal/cli/selector.py,sha256=OJr9Ua3K_l-qu3N3-I8z8oVq8lBakws2-XgfheR5p-c,4741
 modal/cli/server.py,sha256=H0u3u9S-DARMFKdYuvWJcu5s8egOQYxvRr79X_Lceeg,49723
@@ -189,7 +189,7 @@ modal/cli/skills.py,sha256=oniDafrmu_ARYTlButnlXbKE9XlEU1-EFz-eO4tdnFY,11954
 modal/cli/token.py,sha256=TOuauMzSe7PV1bMnmGQO7oJaAsYY03C1GY6Nww8ac8Y,4905
 modal/cli/utils.py,sha256=1tkDLqtVqYvj4xLoRaOuO_cl8WJxPpHQnIdTg5S2tjA,11670
 modal/cli/volume.py,sha256=nM5QKRjX-d6lQO4FPNDFbIZhuWfZ2O_RW8gtWWwgs4Q,11281
-modal/cli/workspace.py,sha256=wt11BRti_FMnWnztTrnPoXUAtLhFVDH194aImXyWCms,8980
+modal/cli/workspace.py,sha256=JHIX9XyYYyrgq8GgjexSGmqwO6dSyPL5irYhecYRVZI,22323
 modal/experimental/__init__.py,sha256=iHj9XLSZ_J0ciUalr96hJ57GbOsi2v87u5QZ6mPiHtg,13205
 modal/experimental/_flash_container_entry.py,sha256=u0ciXgUain0tosulHFVh_Dp7vi51uHWWiThdQbj0whs,2318
 modal/experimental/flash.py,sha256=ZZJIlJ9lLv03CQr6muRUXQB-5tZII_zX7qiLqRuJWGM,13120
@@ -207,7 +207,7 @@ modal/sandbox/_task_command_router_client.py,sha256=qhFXy8eyGIxwxRFZkTsxJVxsAc8c
 modal/sandbox/sandbox.py,sha256=4ekghND9qUGf5wtIQH4mVa6PHGjHgY0UN5RKryOM05k,683
 modal/sandbox/sandbox.pyi,sha256=HYxopAUYMfMEVMWgzeb4qPATPFzLkTCnqpSl9lI-3ac,150321
 modal/skills/modal/SKILL.md,sha256=Bm-0BPTYppJoeQzA-N-Re8L6-nKnV6gspJXMl4cD0P0,5490
-modal-1.6.2.dev8.dist-info/licenses/LICENSE,sha256=psuoW8kuDP96RQsdhzwOqi6fyWv0ct8CR6Jr7He_P_k,10173
+modal-1.6.2.dev10.dist-info/licenses/LICENSE,sha256=psuoW8kuDP96RQsdhzwOqi6fyWv0ct8CR6Jr7He_P_k,10173
 modal_docs/__init__.py,sha256=svYKtV8HDwDCN86zbdWqyq5T8sMdGDj0PVlzc2tIxDM,28
 modal_docs/gen_cli_docs.py,sha256=9-b8vl2EsLWD9zJqpCK8IUi5h44Bjn3i3rSdedZV4bA,6415
 modal_docs/gen_cli_docs_main.py,sha256=UPGr7O1DYTIRLwfINe2rbdh89J3cPVTU1OWL-SjxnOQ,198
@@ -231,10 +231,10 @@ modal_proto/task_command_router_pb2.py,sha256=ysC0d8p3YxwyOpP3B-qDlvE81Yo4ntQiwi
 modal_proto/task_command_router_pb2.pyi,sha256=FDcd5t3ZCmQHUjefOzg07iglrgKYcBrzFvdKIWsEMHI,50628
 modal_proto/task_command_router_pb2_grpc.py,sha256=8iGUGwEVbqOsZWPJ7OsQ9OKUGaSCf9Dr2tvb04Ww6d4,44620
 modal_proto/task_command_router_pb2_grpc.pyi,sha256=26Fq9RQo09B9KLHsgdpRuw-I6Z4-2jrXLQkuDzB-moI,15097
-modal_version/__init__.py,sha256=WsuSyNuz9p14Rv35_HGOr5gTGppmiBErxZvIpLsh-Y4,120
+modal_version/__init__.py,sha256=2lqb4ysefgTqscFMp9LWCNfAU0rKY3oVgW2wnWTy-pw,121
 modal_version/__main__.py,sha256=nLUbubxKx7GXNzJIkTB7M7_u8080LyLM0IS0rzFkC_c,119
-modal-1.6.2.dev8.dist-info/METADATA,sha256=Ra0MKB3MFjRNZdmVPh0Mc-HvN-Uw8yTC1onPfOiu-K0,2512
-modal-1.6.2.dev8.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
-modal-1.6.2.dev8.dist-info/entry_points.txt,sha256=An-wYgeEUnm6xzrAP9_NTSTSciYvvEWsMZILtYrvpAI,46
-modal-1.6.2.dev8.dist-info/top_level.txt,sha256=4BWzoKYREKUZ5iyPzZpjqx4G8uB5TWxXPDwibLcVa7k,43
-modal-1.6.2.dev8.dist-info/RECORD,,
+modal-1.6.2.dev10.dist-info/METADATA,sha256=9gYqJTJseHyFzcr4xOZ3H3E-6BriZbJuQKCaBfxANZ8,2513
+modal-1.6.2.dev10.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
+modal-1.6.2.dev10.dist-info/entry_points.txt,sha256=An-wYgeEUnm6xzrAP9_NTSTSciYvvEWsMZILtYrvpAI,46
+modal-1.6.2.dev10.dist-info/top_level.txt,sha256=4BWzoKYREKUZ5iyPzZpjqx4G8uB5TWxXPDwibLcVa7k,43
+modal-1.6.2.dev10.dist-info/RECORD,,

modal_version/__init__.py

@@ -1,4 +1,4 @@
 # Copyright Modal Labs 2026
 """Supplies the current version of the modal client library."""
 
-__version__ = "1.6.2.dev8"
+__version__ = "1.6.2.dev10"