modal 1.4.4.dev16__tar.gz → 1.4.4.dev17__tar.gz

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modal
-Version: 1.4.4.dev16
+Version: 1.4.4.dev17
 Summary: Python client library for Modal
 Author-email: Modal Labs <support@modal.com>
 License-Expression: Apache-2.0

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/_functions.py

@@ -1208,6 +1208,7 @@ class _Function(typing.Generic[P, ReturnType, OriginalReturnType], _Object, type
         app_name: str,
         name: str,
         *,
+        version: int | None = None,
         load_context_overrides: LoadContext,
     ):
         # internal function lookup implementation that allows lookup of class "service functions"
@@ -1219,6 +1220,7 @@ class _Function(typing.Generic[P, ReturnType, OriginalReturnType], _Object, type
                 app_name=app_name,
                 object_tag=name,
                 environment_name=load_context.environment_name,
+                app_version=version or 0,
             )
             try:
                 response = await load_context.client.stub.FunctionGet(request)
@@ -1251,6 +1253,7 @@ class _Function(typing.Generic[P, ReturnType, OriginalReturnType], _Object, type
         app_name: str,
         name: str,
         *,
+        version: int | None = None,
         environment_name: str | None = None,
         client: _Client | None = None,
     ) -> "_Function":
@@ -1273,6 +1276,12 @@ class _Function(typing.Generic[P, ReturnType, OriginalReturnType], _Object, type
             ```python
             f = modal.Function.from_name("other-app", "function")
             ```
+
+            The `version` parameter allows you to invoke a version-pinned function:
+
+            ```python
+            f_v3 = modal.Function.from_name("other-app", "function", version=3)
+            ```
         """
         if "." in name:
             raise InvalidError(
@@ -1281,7 +1290,10 @@ class _Function(typing.Generic[P, ReturnType, OriginalReturnType], _Object, type
             )
 
         return cls._from_name(
-            app_name, name, load_context_overrides=LoadContext(environment_name=environment_name, client=client)
+            app_name,
+            name,
+            load_context_overrides=LoadContext(environment_name=environment_name, client=client),
+            version=version,
         )
 
     @property

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/_image.py

@@ -60,6 +60,7 @@ from .secret import _Secret
 from .volume import _Volume, _volume_to_mount_proto
 
 if typing.TYPE_CHECKING:
+    import modal
     import modal._functions
     import modal.client
 
@@ -531,7 +532,7 @@ class _Image(_Object, type_prefix="im"):
 
         for secret in secrets:
             if not isinstance(secret, _Secret):
-                raise InvalidError("All secrets of an image needs to be modal.Secret/AioSecret instances")
+                raise InvalidError("All secrets of an Image need to be modal.Secret instances.")
 
         if build_function and len(base_images) != 1:
             raise InvalidError("Cannot run a build function with multiple base images!")
@@ -2763,7 +2764,7 @@ class _Image(_Object, type_prefix="im"):
 
     def pipe(
         self,
-        func: Callable[Concatenate["_Image", P], "_Image"],
+        func: Callable[Concatenate["modal.Image", P], "modal.Image"],
         *args: P.args,
         **kwargs: P.kwargs,
     ) -> "_Image":
@@ -2785,7 +2786,11 @@ class _Image(_Object, type_prefix="im"):
         )
         ```
         """
-        return func(self, *args, **kwargs)
+        # Typing here is complicated because user callables accept the public
+        # Image type, but `self` is an instance of the internal _Image type.
+        self_ = synchronizer._translate_out(self)
+        res = func(self_, *args, **kwargs)  # type: ignore[reportUnknownReturnType]
+        return typing.cast(_Image, synchronizer._translate_in(res))
 
     # Live handle methods
 

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/_object.py

@@ -14,7 +14,6 @@ from modal._traceback import suppress_tb_frame
 from ._load_context import LoadContext
 from ._resolver import Resolver
 from ._utils.async_utils import TaskContext, aclosing
-from ._utils.deprecation import deprecation_warning
 from .client import _Client
 from .config import config, logger
 from .exception import ExecutionError, InvalidError
@@ -196,23 +195,6 @@ class _Object:
                 f"{object_type} has not been hydrated with the metadata it needs to run on Modal{reason}."
             )
 
-    def clone(self) -> Self:
-        """mdmd:hidden Clone a given hydrated object.
-
-        Note: This is not intended to be public API and has no public use. It will be removed in a future release.
-        """
-        object_class = self.__class__.__name__.strip("_")
-        deprecation_warning(
-            (2025, 6, 30),
-            f"{object_class}.clone() is not intended to be public API and will be removed in a future release.",
-        )
-
-        # Object to clone must already be hydrated, otherwise from_loader is more suitable.
-        self._validate_is_hydrated()
-        obj = type(self).__new__(type(self))
-        obj._initialize_from_other(self)
-        return obj
-
     @classmethod
     def _from_loader(
         cls,

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/_utils/grpc_utils.py

@@ -153,7 +153,10 @@ class CustomProtoStatusDetailsCodec(StatusDetailsCodecBase):
         if details is not None:
             for detail in details:
                 detail_container = details_proto.details.add()
-                detail_container.Pack(detail)
+                if detail.DESCRIPTOR.full_name.startswith("modal."):
+                    detail_container.Pack(detail, type_url_prefix="type.modal.com/")
+                else:
+                    detail_container.Pack(detail)
         return details_proto.SerializeToString()
 
     def decode(

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/client.pyi

@@ -35,7 +35,7 @@ class _Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.4.4.dev16",
+        version: str = "1.4.4.dev17",
     ):
         """mdmd:hidden
         The Modal client object is not intended to be instantiated directly by users.
@@ -205,7 +205,7 @@ class Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.4.4.dev16",
+        version: str = "1.4.4.dev17",
     ):
         """mdmd:hidden
         The Modal client object is not intended to be instantiated directly by users.

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/cls.py

@@ -641,6 +641,7 @@ More information on class parameterization can be found here: https://modal.com/
         app_name: str,
         name: str,
         *,
+        version: int | None = None,
         environment_name: str | None = None,
         client: "_Client | None" = None,
     ) -> "_Cls":
@@ -663,6 +664,12 @@ More information on class parameterization can be found here: https://modal.com/
             ```python
             Model = modal.Cls.from_name("other-app", "Model")
             ```
+
+            The `version` parameter constructs a version-pinned Cls:
+
+            ```python
+            Modelv3 = modal.Cls.from_name("other-app", "Model", version=3)
+            ```
         """
 
         async def _load_remote(
@@ -705,6 +712,7 @@ More information on class parameterization can be found here: https://modal.com/
             app_name,
             class_service_name,
             load_context_overrides=load_context_overrides,
+            version=version,
         )
         cls._name = name
         return cls

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/cls.pyi

@@ -291,6 +291,7 @@ class _Cls(modal._object._Object):
         app_name: str,
         name: str,
         *,
+        version: typing.Optional[int] = None,
         environment_name: typing.Optional[str] = None,
         client: typing.Optional[modal.client._Client] = None,
     ) -> _Cls:
@@ -313,6 +314,12 @@ class _Cls(modal._object._Object):
             ```python
             Model = modal.Cls.from_name("other-app", "Model")
             ```
+
+            The `version` parameter constructs a version-pinned Cls:
+
+            ```python
+            Modelv3 = modal.Cls.from_name("other-app", "Model", version=3)
+            ```
         """
         ...
 
@@ -498,6 +505,7 @@ class Cls(modal.object.Object):
         app_name: str,
         name: str,
         *,
+        version: typing.Optional[int] = None,
         environment_name: typing.Optional[str] = None,
         client: typing.Optional[modal.client.Client] = None,
     ) -> Cls:
@@ -520,6 +528,12 @@ class Cls(modal.object.Object):
             ```python
             Model = modal.Cls.from_name("other-app", "Model")
             ```
+
+            The `version` parameter constructs a version-pinned Cls:
+
+            ```python
+            Modelv3 = modal.Cls.from_name("other-app", "Model", version=3)
+            ```
         """
         ...
 

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/dict.py

@@ -23,7 +23,6 @@ from ._object import (
 from ._resolver import Resolver
 from ._serialization import deserialize, serialize
 from ._utils.async_utils import TaskContext, synchronize_api
-from ._utils.deprecation import deprecation_warning
 from ._utils.name_utils import check_object_name
 from ._utils.time_utils import as_timestamp, timestamp_to_localized_dt
 from .client import _Client
@@ -482,26 +481,6 @@ class _Dict(_Object, type_prefix="di"):
             load_context_overrides=LoadContext(client=client),
         )
 
-    @staticmethod
-    async def delete(
-        name: str,
-        *,
-        client: _Client | None = None,
-        environment_name: str | None = None,
-    ):
-        """mdmd:hidden
-        Delete a named Dict object.
-
-        Warning: This deletes an *entire Dict*, not just a specific key.
-        Deletion is irreversible and will affect any Apps currently using the Dict.
-
-        DEPRECATED: This method is deprecated; we recommend using `modal.Dict.objects.delete` instead.
-        """
-        deprecation_warning(
-            (2025, 8, 6), "`modal.Dict.delete` is deprecated; we recommend using `modal.Dict.objects.delete` instead."
-        )
-        await _Dict.objects.delete(name, environment_name=environment_name, client=client)
-
     @live_method
     async def info(self) -> DictInfo:
         """Return information about the Dict object."""

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/dict.pyi

@@ -576,23 +576,6 @@ class _Dict(modal._object._Object):
         """
         ...
 
-    @staticmethod
-    async def delete(
-        name: str,
-        *,
-        client: typing.Optional[modal.client._Client] = None,
-        environment_name: typing.Optional[str] = None,
-    ):
-        """mdmd:hidden
-        Delete a named Dict object.
-
-        Warning: This deletes an *entire Dict*, not just a specific key.
-        Deletion is irreversible and will affect any Apps currently using the Dict.
-
-        DEPRECATED: This method is deprecated; we recommend using `modal.Dict.objects.delete` instead.
-        """
-        ...
-
     async def info(self) -> DictInfo:
         """Return information about the Dict object."""
         ...
@@ -877,45 +860,6 @@ class Dict(modal.object.Object):
         """
         ...
 
-    class __delete_spec(typing_extensions.Protocol):
-        def __call__(
-            self,
-            /,
-            name: str,
-            *,
-            client: typing.Optional[modal.client.Client] = None,
-            environment_name: typing.Optional[str] = None,
-        ):
-            """mdmd:hidden
-            Delete a named Dict object.
-
-            Warning: This deletes an *entire Dict*, not just a specific key.
-            Deletion is irreversible and will affect any Apps currently using the Dict.
-
-            DEPRECATED: This method is deprecated; we recommend using `modal.Dict.objects.delete` instead.
-            """
-            ...
-
-        async def aio(
-            self,
-            /,
-            name: str,
-            *,
-            client: typing.Optional[modal.client.Client] = None,
-            environment_name: typing.Optional[str] = None,
-        ):
-            """mdmd:hidden
-            Delete a named Dict object.
-
-            Warning: This deletes an *entire Dict*, not just a specific key.
-            Deletion is irreversible and will affect any Apps currently using the Dict.
-
-            DEPRECATED: This method is deprecated; we recommend using `modal.Dict.objects.delete` instead.
-            """
-            ...
-
-    delete: typing.ClassVar[__delete_spec]
-
     class __info_spec(typing_extensions.Protocol):
         def __call__(self, /) -> DictInfo:
             """Return information about the Dict object."""

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/functions.pyi

@@ -205,13 +205,21 @@ class Function(
     update_autoscaler: __update_autoscaler_spec
 
     @classmethod
-    def _from_name(cls, app_name: str, name: str, *, load_context_overrides: modal._load_context.LoadContext): ...
+    def _from_name(
+        cls,
+        app_name: str,
+        name: str,
+        *,
+        version: typing.Optional[int] = None,
+        load_context_overrides: modal._load_context.LoadContext,
+    ): ...
     @classmethod
     def from_name(
         cls: type[Function],
         app_name: str,
         name: str,
         *,
+        version: typing.Optional[int] = None,
         environment_name: typing.Optional[str] = None,
         client: typing.Optional[modal.client.Client] = None,
     ) -> Function:
@@ -234,6 +242,12 @@ class Function(
             ```python
             f = modal.Function.from_name("other-app", "function")
             ```
+
+            The `version` parameter allows you to invoke a version-pinned function:
+
+            ```python
+            f_v3 = modal.Function.from_name("other-app", "function", version=3)
+            ```
         """
         ...
 

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/object.pyi

@@ -85,12 +85,6 @@ class Object:
     def _hydrate_metadata(self, metadata: typing.Optional[google.protobuf.message.Message]): ...
     def _get_metadata(self) -> typing.Optional[google.protobuf.message.Message]: ...
     def _validate_is_hydrated(self): ...
-    def clone(self) -> typing_extensions.Self:
-        """mdmd:hidden Clone a given hydrated object.
-
-        Note: This is not intended to be public API and has no public use. It will be removed in a future release.
-        """
-        ...
 
     class ___from_loader_spec(typing_extensions.Protocol):
         def __call__(

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/queue.py

@@ -26,7 +26,6 @@ from ._object import (
 from ._resolver import Resolver
 from ._serialization import deserialize, serialize
 from ._utils.async_utils import TaskContext, synchronize_api, warn_if_generator_is_not_consumed
-from ._utils.deprecation import deprecation_warning
 from ._utils.grpc_utils import Retry
 from ._utils.name_utils import check_object_name
 from ._utils.time_utils import as_timestamp, timestamp_to_localized_dt
@@ -472,23 +471,6 @@ class _Queue(_Object, type_prefix="qu"):
             load_context_overrides=LoadContext(client=client),
         )
 
-    @staticmethod
-    async def delete(name: str, *, client: _Client | None = None, environment_name: str | None = None):
-        """mdmd:hidden
-        Delete a named Queue.
-
-        Warning: This deletes an *entire Queue*, not just a specific entry or partition.
-        Deletion is irreversible and will affect any Apps currently using the Queue.
-
-        DEPRECATED: This method is deprecated; we recommend using `modal.Queue.objects.delete` instead.
-
-        """
-        deprecation_warning(
-            (2025, 8, 6),
-            "`modal.Queue.delete` is deprecated; we recommend using `modal.Queue.objects.delete` instead.",
-        )
-        await _Queue.objects.delete(name, environment_name=environment_name, client=client)
-
     @live_method
     async def info(self) -> QueueInfo:
         """Return information about the Queue object."""

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/queue.pyi

@@ -588,23 +588,6 @@ class _Queue(modal._object._Object):
         """
         ...
 
-    @staticmethod
-    async def delete(
-        name: str,
-        *,
-        client: typing.Optional[modal.client._Client] = None,
-        environment_name: typing.Optional[str] = None,
-    ):
-        """mdmd:hidden
-        Delete a named Queue.
-
-        Warning: This deletes an *entire Queue*, not just a specific entry or partition.
-        Deletion is irreversible and will affect any Apps currently using the Queue.
-
-        DEPRECATED: This method is deprecated; we recommend using `modal.Queue.objects.delete` instead.
-        """
-        ...
-
     async def info(self) -> QueueInfo:
         """Return information about the Queue object."""
         ...
@@ -975,45 +958,6 @@ class Queue(modal.object.Object):
         """
         ...
 
-    class __delete_spec(typing_extensions.Protocol):
-        def __call__(
-            self,
-            /,
-            name: str,
-            *,
-            client: typing.Optional[modal.client.Client] = None,
-            environment_name: typing.Optional[str] = None,
-        ):
-            """mdmd:hidden
-            Delete a named Queue.
-
-            Warning: This deletes an *entire Queue*, not just a specific entry or partition.
-            Deletion is irreversible and will affect any Apps currently using the Queue.
-
-            DEPRECATED: This method is deprecated; we recommend using `modal.Queue.objects.delete` instead.
-            """
-            ...
-
-        async def aio(
-            self,
-            /,
-            name: str,
-            *,
-            client: typing.Optional[modal.client.Client] = None,
-            environment_name: typing.Optional[str] = None,
-        ):
-            """mdmd:hidden
-            Delete a named Queue.
-
-            Warning: This deletes an *entire Queue*, not just a specific entry or partition.
-            Deletion is irreversible and will affect any Apps currently using the Queue.
-
-            DEPRECATED: This method is deprecated; we recommend using `modal.Queue.objects.delete` instead.
-            """
-            ...
-
-    delete: typing.ClassVar[__delete_spec]
-
     class __info_spec(typing_extensions.Protocol):
         def __call__(self, /) -> QueueInfo:
             """Return information about the Queue object."""

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/sandbox.py

@@ -305,6 +305,7 @@ class _Sandbox(_Object, type_prefix="sb"):
         network_file_systems: dict[str | os.PathLike, _NetworkFileSystem] = {},
         block_network: bool = False,
         outbound_cidr_allowlist: Sequence[str] | None = None,
+        outbound_domain_allowlist: Sequence[str] | None = None,
         inbound_cidr_allowlist: Sequence[str] | None = None,
         volumes: dict[str | os.PathLike, _Volume | _CloudBucketMount] = {},
         pty: bool = False,
@@ -385,21 +386,24 @@ class _Sandbox(_Object, type_prefix="sb"):
             if block_network:
                 if outbound_cidr_allowlist is not None:
                     raise InvalidError("`outbound_cidr_allowlist` cannot be used when `block_network` is enabled")
+                if outbound_domain_allowlist is not None:
+                    raise InvalidError("`outbound_domain_allowlist` cannot be used when `block_network` is enabled")
                 if inbound_cidr_allowlist is not None:
                     raise InvalidError("`inbound_cidr_allowlist` cannot be used when `block_network` is enabled")
                 network_access = api_pb2.NetworkAccess(
                     network_access_type=api_pb2.NetworkAccess.NetworkAccessType.BLOCKED,
                 )
-            elif outbound_cidr_allowlist is None:
-                # If the allowlist is empty, we allow all network access.
-                network_access = api_pb2.NetworkAccess(
-                    network_access_type=api_pb2.NetworkAccess.NetworkAccessType.OPEN,
-                )
             else:
-                network_access = api_pb2.NetworkAccess(
-                    network_access_type=api_pb2.NetworkAccess.NetworkAccessType.ALLOWLIST,
-                    allowed_cidrs=outbound_cidr_allowlist,
-                )
+                if outbound_domain_allowlist is None and outbound_cidr_allowlist is None:
+                    network_access = api_pb2.NetworkAccess(
+                        network_access_type=api_pb2.NetworkAccess.NetworkAccessType.OPEN,
+                    )
+                else:
+                    network_access = api_pb2.NetworkAccess(
+                        network_access_type=api_pb2.NetworkAccess.NetworkAccessType.ALLOWLIST,
+                        allowed_cidrs=list(outbound_cidr_allowlist or []),
+                        allowed_domains=list(outbound_domain_allowlist or []),
+                    )
 
             ephemeral_disk = None  # Ephemeral disk requests not supported on Sandboxes.
             definition = api_pb2.Sandbox(
@@ -466,6 +470,7 @@ class _Sandbox(_Object, type_prefix="sb"):
         memory: int | tuple[int, int] | None = None,
         block_network: bool = False,
         outbound_cidr_allowlist: Sequence[str] | None = None,
+        outbound_domain_allowlist: Sequence[str] | None = None,
         inbound_cidr_allowlist: Sequence[str] | None = None,
         volumes: dict[str | os.PathLike, _Volume | _CloudBucketMount] = {},
         pty: bool = False,
@@ -513,6 +518,8 @@ class _Sandbox(_Object, type_prefix="sb"):
                 additionally specify a hard limit in MiB.
             block_network: Whether to block network access.
             outbound_cidr_allowlist: List of CIDRs the sandbox is allowed to access. If None, all CIDRs are allowed.
+            outbound_domain_allowlist: List of domain names the sandbox is allowed to access. Supports
+                wildcard prefixes (``*.``).
             inbound_cidr_allowlist:
                 List of CIDRs allowed to connect inbound to the sandbox (tunnels and connection tokens). If None,
                 all CIDRs are allowed.
@@ -596,6 +603,7 @@ class _Sandbox(_Object, type_prefix="sb"):
             memory=memory,
             block_network=block_network,
             outbound_cidr_allowlist=outbound_cidr_allowlist,
+            outbound_domain_allowlist=outbound_domain_allowlist,
             inbound_cidr_allowlist=inbound_cidr_allowlist,
             volumes=volumes,
             pty=pty,
@@ -635,6 +643,7 @@ class _Sandbox(_Object, type_prefix="sb"):
         memory: int | tuple[int, int] | None = None,
         block_network: bool = False,
         outbound_cidr_allowlist: Sequence[str] | None = None,
+        outbound_domain_allowlist: Sequence[str] | None = None,
         inbound_cidr_allowlist: Sequence[str] | None = None,
         volumes: dict[str | os.PathLike, _Volume | _CloudBucketMount] = {},
         pty: bool = False,
@@ -688,6 +697,7 @@ class _Sandbox(_Object, type_prefix="sb"):
             network_file_systems=network_file_systems,
             block_network=block_network,
             outbound_cidr_allowlist=outbound_cidr_allowlist,
+            outbound_domain_allowlist=outbound_domain_allowlist,
             inbound_cidr_allowlist=inbound_cidr_allowlist,
             volumes=volumes,
             pty=pty,

{modal-1.4.4.dev16 → modal-1.4.4.dev17}/modal/sandbox.pyi

@@ -187,6 +187,7 @@ class _Sandbox(modal._object._Object):
         network_file_systems: dict[typing.Union[str, os.PathLike], modal.network_file_system._NetworkFileSystem] = {},
         block_network: bool = False,
         outbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+        outbound_domain_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
         inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
         volumes: dict[
             typing.Union[str, os.PathLike],
@@ -229,6 +230,7 @@ class _Sandbox(modal._object._Object):
         memory: typing.Union[int, tuple[int, int], None] = None,
         block_network: bool = False,
         outbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+        outbound_domain_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
         inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
         volumes: dict[
             typing.Union[str, os.PathLike],
@@ -278,6 +280,8 @@ class _Sandbox(modal._object._Object):
                 additionally specify a hard limit in MiB.
             block_network: Whether to block network access.
             outbound_cidr_allowlist: List of CIDRs the sandbox is allowed to access. If None, all CIDRs are allowed.
+            outbound_domain_allowlist: List of domain names the sandbox is allowed to access. Supports
+                wildcard prefixes (``*.``).
             inbound_cidr_allowlist:
                 List of CIDRs allowed to connect inbound to the sandbox (tunnels and connection tokens). If None,
                 all CIDRs are allowed.
@@ -339,6 +343,7 @@ class _Sandbox(modal._object._Object):
         memory: typing.Union[int, tuple[int, int], None] = None,
         block_network: bool = False,
         outbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+        outbound_domain_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
         inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
         volumes: dict[
             typing.Union[str, os.PathLike],
@@ -1199,6 +1204,7 @@ class Sandbox(modal.object.Object):
         network_file_systems: dict[typing.Union[str, os.PathLike], modal.network_file_system.NetworkFileSystem] = {},
         block_network: bool = False,
         outbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+        outbound_domain_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
         inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
         volumes: dict[
             typing.Union[str, os.PathLike], typing.Union[modal.volume.Volume, modal.cloud_bucket_mount.CloudBucketMount]
@@ -1244,6 +1250,7 @@ class Sandbox(modal.object.Object):
             memory: typing.Union[int, tuple[int, int], None] = None,
             block_network: bool = False,
             outbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+            outbound_domain_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
             inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
             volumes: dict[
                 typing.Union[str, os.PathLike],
@@ -1293,6 +1300,8 @@ class Sandbox(modal.object.Object):
                     additionally specify a hard limit in MiB.
                 block_network: Whether to block network access.
                 outbound_cidr_allowlist: List of CIDRs the sandbox is allowed to access. If None, all CIDRs are allowed.
+                outbound_domain_allowlist: List of domain names the sandbox is allowed to access. Supports
+                    wildcard prefixes (``*.``).
                 inbound_cidr_allowlist:
                     List of CIDRs allowed to connect inbound to the sandbox (tunnels and connection tokens). If None,
                     all CIDRs are allowed.
@@ -1356,6 +1365,7 @@ class Sandbox(modal.object.Object):
             memory: typing.Union[int, tuple[int, int], None] = None,
             block_network: bool = False,
             outbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+            outbound_domain_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
             inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
             volumes: dict[
                 typing.Union[str, os.PathLike],
@@ -1405,6 +1415,8 @@ class Sandbox(modal.object.Object):
                     additionally specify a hard limit in MiB.
                 block_network: Whether to block network access.
                 outbound_cidr_allowlist: List of CIDRs the sandbox is allowed to access. If None, all CIDRs are allowed.
+                outbound_domain_allowlist: List of domain names the sandbox is allowed to access. Supports
+                    wildcard prefixes (``*.``).
                 inbound_cidr_allowlist:
                     List of CIDRs allowed to connect inbound to the sandbox (tunnels and connection tokens). If None,
                     all CIDRs are allowed.
@@ -1472,6 +1484,7 @@ class Sandbox(modal.object.Object):
             memory: typing.Union[int, tuple[int, int], None] = None,
             block_network: bool = False,
             outbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+            outbound_domain_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
             inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
             volumes: dict[
                 typing.Union[str, os.PathLike],
@@ -1523,6 +1536,7 @@ class Sandbox(modal.object.Object):
             memory: typing.Union[int, tuple[int, int], None] = None,
             block_network: bool = False,
             outbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+            outbound_domain_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
             inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
             volumes: dict[
                 typing.Union[str, os.PathLike],