modal 1.4.4.dev3__tar.gz → 1.4.4.dev5__tar.gz

{modal-1.4.4.dev3 → modal-1.4.4.dev5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modal
-Version: 1.4.4.dev3
+Version: 1.4.4.dev5
 Summary: Python client library for Modal
 Author-email: Modal Labs <support@modal.com>
 License-Expression: Apache-2.0

{modal-1.4.4.dev3 → modal-1.4.4.dev5}/modal/client.pyi

@@ -35,7 +35,7 @@ class _Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.4.4.dev3",
+        version: str = "1.4.4.dev5",
     ):
         """mdmd:hidden
         The Modal client object is not intended to be instantiated directly by users.
@@ -175,7 +175,7 @@ class Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.4.4.dev3",
+        version: str = "1.4.4.dev5",
     ):
         """mdmd:hidden
         The Modal client object is not intended to be instantiated directly by users.

{modal-1.4.4.dev3 → modal-1.4.4.dev5}/modal/sandbox.py

@@ -696,6 +696,7 @@ class _Sandbox(_Object, type_prefix="sb"):
         block_network: bool = False,
         cidr_allowlist: Optional[Sequence[str]] = None,
         inbound_cidr_allowlist: Optional[Sequence[str]] = None,
+        volumes: dict[Union[str, os.PathLike], Union[_Volume, _CloudBucketMount]] = {},
         pty: bool = False,
         encrypted_ports: Sequence[int] = [],
         h2_ports: Sequence[int] = [],
@@ -707,11 +708,12 @@ class _Sandbox(_Object, type_prefix="sb"):
         """Create a sandbox using the V2 backend.
 
         Supported features include exec, encrypted tunnels, wait/poll/terminate,
-        CPU and memory configuration, region placement,
-        and filesystem snapshots.
+        CPU and memory configuration, region placement, volumes, cloud bucket mounts
+        (with static credentials via `secret=...`), and filesystem snapshots.
 
-        Features like tags, memory snapshots, volumes, network file systems, GPUs,
-        custom domains, OIDC identity tokens, and proxies are not supported.
+        Features like tags, memory snapshots, network file systems, GPUs, custom
+        domains, OIDC identity tokens (including `oidc_auth_role_arn` on a
+        CloudBucketMount), and proxies are not supported.
 
         V2 sandboxes created with this method are not currently returned by
         `Sandbox.list()` and cannot be looked up with `Sandbox.from_name()`.
@@ -730,6 +732,24 @@ class _Sandbox(_Object, type_prefix="sb"):
         if block_network and (encrypted_ports or h2_ports or unencrypted_ports):
             raise InvalidError("Cannot specify open ports when `block_network` is enabled")
 
+        validated_volumes = validate_volumes(volumes)
+        cloud_bucket_mounts = [(k, v) for k, v in validated_volumes if isinstance(v, _CloudBucketMount)]
+        validated_volumes = [(k, v) for k, v in validated_volumes if isinstance(v, _Volume)]
+
+        # The V2 backend does not yet propagate `oidc_identity_token` from server to worker - it is silently dropped
+        # TODO(akshay) add support for OIDC tokens
+        if include_oidc_identity_token:
+            raise InvalidError(
+                "Sandbox._experimental_create does not support include_oidc_identity_token=True. "
+                "Use Sandbox.create instead."
+            )
+        for path, cbm in cloud_bucket_mounts:
+            if cbm.oidc_auth_role_arn:
+                raise InvalidError(
+                    "Sandbox._experimental_create does not support CloudBucketMount with oidc_auth_role_arn "
+                    f"(at mount path {path!r}). Use static credentials via `secret=...`, or use Sandbox.create."
+                )
+
         secrets = secrets or []
         if env:
             secrets = [*secrets, _Secret.from_dict(env)]
@@ -777,9 +797,18 @@ class _Sandbox(_Object, type_prefix="sb"):
                 dep_tasks.append(resolver.load(image, load_context))
             for secret in secrets:
                 dep_tasks.append(resolver.load(secret, load_context))
+            for _, vol in validated_volumes:
+                dep_tasks.append(resolver.load(vol, load_context))
+            for _, cloud_bucket_mount in cloud_bucket_mounts:
+                if cloud_bucket_mount.secret:
+                    dep_tasks.append(resolver.load(cloud_bucket_mount.secret, load_context))
             if dep_tasks:
                 await asyncio.gather(*dep_tasks)
 
+            validate_volumes_by_object_id(validated_volumes)
+
+            volume_mounts = [_volume_to_mount_proto(path, volume) for path, volume in validated_volumes]
+
             definition = api_pb2.Sandbox(
                 entrypoint_args=args,
                 image_id=image.object_id,
@@ -801,6 +830,8 @@ class _Sandbox(_Object, type_prefix="sb"):
                 name=name,
                 include_oidc_identity_token=include_oidc_identity_token,
                 inbound_cidr_allowlist=list(inbound_cidr_allowlist) if inbound_cidr_allowlist is not None else [],
+                volume_mounts=volume_mounts,
+                cloud_bucket_mounts=cloud_bucket_mounts_to_proto(cloud_bucket_mounts),
             )
 
             create_req = api_pb2.SandboxCreateV2Request(app_id=load_context.app_id, definition=definition)

{modal-1.4.4.dev3 → modal-1.4.4.dev5}/modal/sandbox.pyi

@@ -325,6 +325,10 @@ class _Sandbox(modal._object._Object):
         block_network: bool = False,
         cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
         inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+        volumes: dict[
+            typing.Union[str, os.PathLike],
+            typing.Union[modal.volume._Volume, modal.cloud_bucket_mount._CloudBucketMount],
+        ] = {},
         pty: bool = False,
         encrypted_ports: collections.abc.Sequence[int] = [],
         h2_ports: collections.abc.Sequence[int] = [],
@@ -336,11 +340,12 @@ class _Sandbox(modal._object._Object):
         """Create a sandbox using the V2 backend.
 
         Supported features include exec, encrypted tunnels, wait/poll/terminate,
-        CPU and memory configuration, region placement,
-        and filesystem snapshots.
+        CPU and memory configuration, region placement, volumes, cloud bucket mounts
+        (with static credentials via `secret=...`), and filesystem snapshots.
 
-        Features like tags, memory snapshots, volumes, network file systems, GPUs,
-        custom domains, OIDC identity tokens, and proxies are not supported.
+        Features like tags, memory snapshots, network file systems, GPUs, custom
+        domains, OIDC identity tokens (including `oidc_auth_role_arn` on a
+        CloudBucketMount), and proxies are not supported.
 
         V2 sandboxes created with this method are not currently returned by
         `Sandbox.list()` and cannot be looked up with `Sandbox.from_name()`.
@@ -1216,6 +1221,10 @@ class Sandbox(modal.object.Object):
             block_network: bool = False,
             cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
             inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+            volumes: dict[
+                typing.Union[str, os.PathLike],
+                typing.Union[modal.volume.Volume, modal.cloud_bucket_mount.CloudBucketMount],
+            ] = {},
             pty: bool = False,
             encrypted_ports: collections.abc.Sequence[int] = [],
             h2_ports: collections.abc.Sequence[int] = [],
@@ -1227,11 +1236,12 @@ class Sandbox(modal.object.Object):
             """Create a sandbox using the V2 backend.
 
             Supported features include exec, encrypted tunnels, wait/poll/terminate,
-            CPU and memory configuration, region placement,
-            and filesystem snapshots.
+            CPU and memory configuration, region placement, volumes, cloud bucket mounts
+            (with static credentials via `secret=...`), and filesystem snapshots.
 
-            Features like tags, memory snapshots, volumes, network file systems, GPUs,
-            custom domains, OIDC identity tokens, and proxies are not supported.
+            Features like tags, memory snapshots, network file systems, GPUs, custom
+            domains, OIDC identity tokens (including `oidc_auth_role_arn` on a
+            CloudBucketMount), and proxies are not supported.
 
             V2 sandboxes created with this method are not currently returned by
             `Sandbox.list()` and cannot be looked up with `Sandbox.from_name()`.
@@ -1259,6 +1269,10 @@ class Sandbox(modal.object.Object):
             block_network: bool = False,
             cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
             inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+            volumes: dict[
+                typing.Union[str, os.PathLike],
+                typing.Union[modal.volume.Volume, modal.cloud_bucket_mount.CloudBucketMount],
+            ] = {},
             pty: bool = False,
             encrypted_ports: collections.abc.Sequence[int] = [],
             h2_ports: collections.abc.Sequence[int] = [],
@@ -1270,11 +1284,12 @@ class Sandbox(modal.object.Object):
             """Create a sandbox using the V2 backend.
 
             Supported features include exec, encrypted tunnels, wait/poll/terminate,
-            CPU and memory configuration, region placement,
-            and filesystem snapshots.
+            CPU and memory configuration, region placement, volumes, cloud bucket mounts
+            (with static credentials via `secret=...`), and filesystem snapshots.
 
-            Features like tags, memory snapshots, volumes, network file systems, GPUs,
-            custom domains, OIDC identity tokens, and proxies are not supported.
+            Features like tags, memory snapshots, network file systems, GPUs, custom
+            domains, OIDC identity tokens (including `oidc_auth_role_arn` on a
+            CloudBucketMount), and proxies are not supported.
 
             V2 sandboxes created with this method are not currently returned by
             `Sandbox.list()` and cannot be looked up with `Sandbox.from_name()`.

{modal-1.4.4.dev3 → modal-1.4.4.dev5}/modal/volume.py

@@ -471,8 +471,8 @@ class _Volume(_Object, type_prefix="vo"):
         Note that these options are not properties stored with the Volume itself - they can be individually configured
         for each Volume - container association.
 
-        read_only: bool (optional) - set this to True to make the Volume read only from within containers
-        sub_path: str | PurePosixPath (optional) - only mount this sub_path directory from the Volume.
+        `read_only`: bool (optional) - set this to True to make the Volume read only from within containers
+        `sub_path`: str | PurePosixPath (optional) - only mount this sub_path directory from the Volume.
             If the directory doesn't exist in the Volume, it will be created when the container starts up
 
 

{modal-1.4.4.dev3 → modal-1.4.4.dev5}/modal/volume.pyi

@@ -519,8 +519,8 @@ class _Volume(modal._object._Object):
         Note that these options are not properties stored with the Volume itself - they can be individually configured
         for each Volume - container association.
 
-        read_only: bool (optional) - set this to True to make the Volume read only from within containers
-        sub_path: str | PurePosixPath (optional) - only mount this sub_path directory from the Volume.
+        `read_only`: bool (optional) - set this to True to make the Volume read only from within containers
+        `sub_path`: str | PurePosixPath (optional) - only mount this sub_path directory from the Volume.
             If the directory doesn't exist in the Volume, it will be created when the container starts up
 
 
@@ -879,8 +879,8 @@ class Volume(modal.object.Object):
         Note that these options are not properties stored with the Volume itself - they can be individually configured
         for each Volume - container association.
 
-        read_only: bool (optional) - set this to True to make the Volume read only from within containers
-        sub_path: str | PurePosixPath (optional) - only mount this sub_path directory from the Volume.
+        `read_only`: bool (optional) - set this to True to make the Volume read only from within containers
+        `sub_path`: str | PurePosixPath (optional) - only mount this sub_path directory from the Volume.
             If the directory doesn't exist in the Volume, it will be created when the container starts up
 
 

{modal-1.4.4.dev3 → modal-1.4.4.dev5}/modal.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modal
-Version: 1.4.4.dev3
+Version: 1.4.4.dev5
 Summary: Python client library for Modal
 Author-email: Modal Labs <support@modal.com>
 License-Expression: Apache-2.0