modal 1.5.2.dev0__tar.gz → 1.5.2.dev1__tar.gz

{modal-1.5.2.dev0 → modal-1.5.2.dev1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modal
-Version: 1.5.2.dev0
+Version: 1.5.2.dev1
 Summary: Python client library for Modal
 Author-email: Modal Labs <support@modal.com>
 License-Expression: Apache-2.0

{modal-1.5.2.dev0 → modal-1.5.2.dev1}/modal/client.pyi

@@ -35,7 +35,7 @@ class _Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.5.2.dev0",
+        version: str = "1.5.2.dev1",
     ):
         """mdmd:hidden
         The Modal client object is not intended to be instantiated directly by users.
@@ -205,7 +205,7 @@ class Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.5.2.dev0",
+        version: str = "1.5.2.dev1",
     ):
         """mdmd:hidden
         The Modal client object is not intended to be instantiated directly by users.

{modal-1.5.2.dev0 → modal-1.5.2.dev1}/modal/functions.pyi

@@ -490,7 +490,7 @@ class Function(
 
     _call_generator: ___call_generator_spec
 
-    class __remote_spec(typing_extensions.Protocol[ReturnType_INNER, P_INNER]):
+    class __remote_spec(typing_extensions.Protocol[P_INNER, ReturnType_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> ReturnType_INNER:
             """Calls the function remotely, executing it with the given arguments and returning the execution's result.
 
@@ -515,7 +515,7 @@ class Function(
             """
             ...
 
-    remote: __remote_spec[modal._functions.ReturnType, modal._functions.P]
+    remote: __remote_spec[modal._functions.P, modal._functions.ReturnType]
 
     class __remote_gen_spec(typing_extensions.Protocol):
         def __call__(self, /, *args, **kwargs) -> typing.Generator[typing.Any, None, None]:
@@ -565,7 +565,7 @@ class Function(
         """
         ...
 
-    class ___experimental_spawn_spec(typing_extensions.Protocol[ReturnType_INNER, P_INNER]):
+    class ___experimental_spawn_spec(typing_extensions.Protocol[P_INNER, ReturnType_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> FunctionCall[ReturnType_INNER]:
             """[Experimental] Calls the function with the given arguments, without waiting for the results.
 
@@ -598,7 +598,7 @@ class Function(
             """
             ...
 
-    _experimental_spawn: ___experimental_spawn_spec[modal._functions.ReturnType, modal._functions.P]
+    _experimental_spawn: ___experimental_spawn_spec[modal._functions.P, modal._functions.ReturnType]
 
     class ___spawn_map_inner_spec(typing_extensions.Protocol[P_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> None: ...
@@ -606,7 +606,7 @@ class Function(
 
     _spawn_map_inner: ___spawn_map_inner_spec[modal._functions.P]
 
-    class __spawn_spec(typing_extensions.Protocol[ReturnType_INNER, P_INNER]):
+    class __spawn_spec(typing_extensions.Protocol[P_INNER, ReturnType_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> FunctionCall[ReturnType_INNER]:
             """Calls the function with the given arguments, without waiting for the results.
 
@@ -639,7 +639,7 @@ class Function(
             """
             ...
 
-    spawn: __spawn_spec[modal._functions.ReturnType, modal._functions.P]
+    spawn: __spawn_spec[modal._functions.P, modal._functions.ReturnType]
 
     def get_raw_f(self) -> collections.abc.Callable[..., typing.Any]:
         """Return the inner Python object wrapped by this Modal Function.

{modal-1.5.2.dev0 → modal-1.5.2.dev1}/modal/sandbox.py

@@ -839,7 +839,9 @@ class _Sandbox(_Object, type_prefix="sb"):
         region: str | Sequence[str] | None = None,
         block_network: bool = False,
         outbound_cidr_allowlist: Sequence[str] | None = None,
+        outbound_domain_allowlist: Sequence[str] | None = None,
         inbound_cidr_allowlist: Sequence[str] | None = None,
+        i6pn: bool = False,
         volumes: dict[str | os.PathLike, _Volume | _CloudBucketMount] = {},
         pty: bool = False,
         encrypted_ports: Sequence[int] = [],
@@ -854,13 +856,20 @@ class _Sandbox(_Object, type_prefix="sb"):
         """Create a sandbox using the V2 backend.
 
         Supported features include exec, encrypted tunnels, wait/poll/terminate,
-        CPU and memory configuration, region placement, volumes, cloud bucket mounts
-        (with static credentials via `secret=...` or `oidc_auth_role_arn`), OIDC
-        identity tokens, proxies, and filesystem snapshots.
+        CPU and memory configuration, region placement, private IPv6 networking
+        (i6pn), volumes, cloud bucket mounts (with static credentials via
+        `secret=...` or `oidc_auth_role_arn`), OIDC identity tokens, proxies, and
+        filesystem snapshots.
 
         Features like tags, memory snapshots, network file systems, GPUs, and custom
         domains are not supported.
 
+        Set `i6pn=True` to enable private IPv6 networking so sandboxes in the same
+        workspace can address each other directly at their `i6pn.modal.local`
+        address. i6pn only connects sandboxes co-located on the same routable
+        network, so pin every sandbox in the group to the same specific region
+        (e.g. `region="us-east-1"`).
+
         V2 sandboxes created with this method are not currently returned by
         `Sandbox.list()` and cannot be looked up with `Sandbox.from_name()`.
         Store `sandbox.object_id` if you need to retrieve the sandbox later, and
@@ -878,6 +887,12 @@ class _Sandbox(_Object, type_prefix="sb"):
         if block_network and (encrypted_ports or h2_ports or unencrypted_ports):
             raise InvalidError("Cannot specify open ports when `block_network` is enabled")
 
+        if block_network and i6pn:
+            raise InvalidError(
+                "`block_network` disables all networking, including i6pn. To keep i6pn while blocking "
+                "public egress, use an empty outbound allowlist (`outbound_cidr_allowlist=[]`) instead."
+            )
+
         validated_volumes = validate_volumes(volumes)
         cloud_bucket_mounts = [(k, v) for k, v in validated_volumes if isinstance(v, _CloudBucketMount)]
         validated_volumes = [(k, v) for k, v in validated_volumes if isinstance(v, _Volume)]
@@ -915,19 +930,22 @@ class _Sandbox(_Object, type_prefix="sb"):
         if block_network:
             if outbound_cidr_allowlist is not None:
                 raise InvalidError("`outbound_cidr_allowlist` cannot be used when `block_network` is enabled")
+            if outbound_domain_allowlist is not None:
+                raise InvalidError("`outbound_domain_allowlist` cannot be used when `block_network` is enabled")
             if inbound_cidr_allowlist is not None:
                 raise InvalidError("`inbound_cidr_allowlist` cannot be used when `block_network` is enabled")
             network_access = api_pb2.NetworkAccess(
                 network_access_type=api_pb2.NetworkAccess.NetworkAccessType.BLOCKED,
             )
-        elif outbound_cidr_allowlist is None:
+        elif outbound_domain_allowlist is None and outbound_cidr_allowlist is None:
             network_access = api_pb2.NetworkAccess(
                 network_access_type=api_pb2.NetworkAccess.NetworkAccessType.OPEN,
             )
         else:
             network_access = api_pb2.NetworkAccess(
                 network_access_type=api_pb2.NetworkAccess.NetworkAccessType.ALLOWLIST,
-                allowed_cidrs=outbound_cidr_allowlist,
+                allowed_cidrs=list(outbound_cidr_allowlist or []),
+                allowed_domains=list(outbound_domain_allowlist or []),
             )
 
         async def _load(self: _Sandbox, resolver: Resolver, load_context: LoadContext, _existing_object_id: str | None):
@@ -972,6 +990,7 @@ class _Sandbox(_Object, type_prefix="sb"):
                 name=name,
                 include_oidc_identity_token=include_oidc_identity_token,
                 inbound_cidr_allowlist=list(inbound_cidr_allowlist) if inbound_cidr_allowlist is not None else [],
+                i6pn_enabled=i6pn,
                 volume_mounts=volume_mounts,
                 cloud_bucket_mounts=cloud_bucket_mounts_to_proto(cloud_bucket_mounts),
                 readiness_probe=(readiness_probe._to_proto() if readiness_probe else None),

{modal-1.5.2.dev0 → modal-1.5.2.dev1}/modal/sandbox.pyi

@@ -402,7 +402,9 @@ class _Sandbox(modal._object._Object):
         region: typing.Union[str, collections.abc.Sequence[str], None] = None,
         block_network: bool = False,
         outbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+        outbound_domain_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
         inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+        i6pn: bool = False,
         volumes: dict[
             typing.Union[str, os.PathLike],
             typing.Union[modal.volume._Volume, modal.cloud_bucket_mount._CloudBucketMount],
@@ -420,13 +422,20 @@ class _Sandbox(modal._object._Object):
         """Create a sandbox using the V2 backend.
 
         Supported features include exec, encrypted tunnels, wait/poll/terminate,
-        CPU and memory configuration, region placement, volumes, cloud bucket mounts
-        (with static credentials via `secret=...` or `oidc_auth_role_arn`), OIDC
-        identity tokens, proxies, and filesystem snapshots.
+        CPU and memory configuration, region placement, private IPv6 networking
+        (i6pn), volumes, cloud bucket mounts (with static credentials via
+        `secret=...` or `oidc_auth_role_arn`), OIDC identity tokens, proxies, and
+        filesystem snapshots.
 
         Features like tags, memory snapshots, network file systems, GPUs, and custom
         domains are not supported.
 
+        Set `i6pn=True` to enable private IPv6 networking so sandboxes in the same
+        workspace can address each other directly at their `i6pn.modal.local`
+        address. i6pn only connects sandboxes co-located on the same routable
+        network, so pin every sandbox in the group to the same specific region
+        (e.g. `region="us-east-1"`).
+
         V2 sandboxes created with this method are not currently returned by
         `Sandbox.list()` and cannot be looked up with `Sandbox.from_name()`.
         Store `sandbox.object_id` if you need to retrieve the sandbox later, and
@@ -1625,7 +1634,9 @@ class Sandbox(modal.object.Object):
             region: typing.Union[str, collections.abc.Sequence[str], None] = None,
             block_network: bool = False,
             outbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+            outbound_domain_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
             inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+            i6pn: bool = False,
             volumes: dict[
                 typing.Union[str, os.PathLike],
                 typing.Union[modal.volume.Volume, modal.cloud_bucket_mount.CloudBucketMount],
@@ -1643,13 +1654,20 @@ class Sandbox(modal.object.Object):
             """Create a sandbox using the V2 backend.
 
             Supported features include exec, encrypted tunnels, wait/poll/terminate,
-            CPU and memory configuration, region placement, volumes, cloud bucket mounts
-            (with static credentials via `secret=...` or `oidc_auth_role_arn`), OIDC
-            identity tokens, proxies, and filesystem snapshots.
+            CPU and memory configuration, region placement, private IPv6 networking
+            (i6pn), volumes, cloud bucket mounts (with static credentials via
+            `secret=...` or `oidc_auth_role_arn`), OIDC identity tokens, proxies, and
+            filesystem snapshots.
 
             Features like tags, memory snapshots, network file systems, GPUs, and custom
             domains are not supported.
 
+            Set `i6pn=True` to enable private IPv6 networking so sandboxes in the same
+            workspace can address each other directly at their `i6pn.modal.local`
+            address. i6pn only connects sandboxes co-located on the same routable
+            network, so pin every sandbox in the group to the same specific region
+            (e.g. `region="us-east-1"`).
+
             V2 sandboxes created with this method are not currently returned by
             `Sandbox.list()` and cannot be looked up with `Sandbox.from_name()`.
             Store `sandbox.object_id` if you need to retrieve the sandbox later, and
@@ -1675,7 +1693,9 @@ class Sandbox(modal.object.Object):
             region: typing.Union[str, collections.abc.Sequence[str], None] = None,
             block_network: bool = False,
             outbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+            outbound_domain_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
             inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+            i6pn: bool = False,
             volumes: dict[
                 typing.Union[str, os.PathLike],
                 typing.Union[modal.volume.Volume, modal.cloud_bucket_mount.CloudBucketMount],
@@ -1693,13 +1713,20 @@ class Sandbox(modal.object.Object):
             """Create a sandbox using the V2 backend.
 
             Supported features include exec, encrypted tunnels, wait/poll/terminate,
-            CPU and memory configuration, region placement, volumes, cloud bucket mounts
-            (with static credentials via `secret=...` or `oidc_auth_role_arn`), OIDC
-            identity tokens, proxies, and filesystem snapshots.
+            CPU and memory configuration, region placement, private IPv6 networking
+            (i6pn), volumes, cloud bucket mounts (with static credentials via
+            `secret=...` or `oidc_auth_role_arn`), OIDC identity tokens, proxies, and
+            filesystem snapshots.
 
             Features like tags, memory snapshots, network file systems, GPUs, and custom
             domains are not supported.
 
+            Set `i6pn=True` to enable private IPv6 networking so sandboxes in the same
+            workspace can address each other directly at their `i6pn.modal.local`
+            address. i6pn only connects sandboxes co-located on the same routable
+            network, so pin every sandbox in the group to the same specific region
+            (e.g. `region="us-east-1"`).
+
             V2 sandboxes created with this method are not currently returned by
             `Sandbox.list()` and cannot be looked up with `Sandbox.from_name()`.
             Store `sandbox.object_id` if you need to retrieve the sandbox later, and

{modal-1.5.2.dev0 → modal-1.5.2.dev1}/modal.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modal
-Version: 1.5.2.dev0
+Version: 1.5.2.dev1
 Summary: Python client library for Modal
 Author-email: Modal Labs <support@modal.com>
 License-Expression: Apache-2.0