modal 1.5.2.dev0__tar.gz → 1.5.2.dev2__tar.gz

{modal-1.5.2.dev0 → modal-1.5.2.dev2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modal
-Version: 1.5.2.dev0
+Version: 1.5.2.dev2
 Summary: Python client library for Modal
 Author-email: Modal Labs <support@modal.com>
 License-Expression: Apache-2.0

{modal-1.5.2.dev0 → modal-1.5.2.dev2}/modal/client.pyi

@@ -35,7 +35,7 @@ class _Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.5.2.dev0",
+        version: str = "1.5.2.dev2",
     ):
         """mdmd:hidden
         The Modal client object is not intended to be instantiated directly by users.
@@ -205,7 +205,7 @@ class Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.5.2.dev0",
+        version: str = "1.5.2.dev2",
     ):
         """mdmd:hidden
         The Modal client object is not intended to be instantiated directly by users.

{modal-1.5.2.dev0 → modal-1.5.2.dev2}/modal/functions.pyi

@@ -490,7 +490,7 @@ class Function(
 
     _call_generator: ___call_generator_spec
 
-    class __remote_spec(typing_extensions.Protocol[ReturnType_INNER, P_INNER]):
+    class __remote_spec(typing_extensions.Protocol[P_INNER, ReturnType_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> ReturnType_INNER:
             """Calls the function remotely, executing it with the given arguments and returning the execution's result.
 
@@ -515,7 +515,7 @@ class Function(
             """
             ...
 
-    remote: __remote_spec[modal._functions.ReturnType, modal._functions.P]
+    remote: __remote_spec[modal._functions.P, modal._functions.ReturnType]
 
     class __remote_gen_spec(typing_extensions.Protocol):
         def __call__(self, /, *args, **kwargs) -> typing.Generator[typing.Any, None, None]:
@@ -565,7 +565,7 @@ class Function(
         """
         ...
 
-    class ___experimental_spawn_spec(typing_extensions.Protocol[ReturnType_INNER, P_INNER]):
+    class ___experimental_spawn_spec(typing_extensions.Protocol[P_INNER, ReturnType_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> FunctionCall[ReturnType_INNER]:
             """[Experimental] Calls the function with the given arguments, without waiting for the results.
 
@@ -598,7 +598,7 @@ class Function(
             """
             ...
 
-    _experimental_spawn: ___experimental_spawn_spec[modal._functions.ReturnType, modal._functions.P]
+    _experimental_spawn: ___experimental_spawn_spec[modal._functions.P, modal._functions.ReturnType]
 
     class ___spawn_map_inner_spec(typing_extensions.Protocol[P_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> None: ...
@@ -606,7 +606,7 @@ class Function(
 
     _spawn_map_inner: ___spawn_map_inner_spec[modal._functions.P]
 
-    class __spawn_spec(typing_extensions.Protocol[ReturnType_INNER, P_INNER]):
+    class __spawn_spec(typing_extensions.Protocol[P_INNER, ReturnType_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> FunctionCall[ReturnType_INNER]:
             """Calls the function with the given arguments, without waiting for the results.
 
@@ -639,7 +639,7 @@ class Function(
             """
             ...
 
-    spawn: __spawn_spec[modal._functions.ReturnType, modal._functions.P]
+    spawn: __spawn_spec[modal._functions.P, modal._functions.ReturnType]
 
     def get_raw_f(self) -> collections.abc.Callable[..., typing.Any]:
         """Return the inner Python object wrapped by this Modal Function.

{modal-1.5.2.dev0 → modal-1.5.2.dev2}/modal/sandbox.py

@@ -839,7 +839,9 @@ class _Sandbox(_Object, type_prefix="sb"):
         region: str | Sequence[str] | None = None,
         block_network: bool = False,
         outbound_cidr_allowlist: Sequence[str] | None = None,
+        outbound_domain_allowlist: Sequence[str] | None = None,
         inbound_cidr_allowlist: Sequence[str] | None = None,
+        i6pn: bool = False,
         volumes: dict[str | os.PathLike, _Volume | _CloudBucketMount] = {},
         pty: bool = False,
         encrypted_ports: Sequence[int] = [],
@@ -847,6 +849,7 @@ class _Sandbox(_Object, type_prefix="sb"):
         unencrypted_ports: Sequence[int] = [],
         proxy: _Proxy | None = None,
         readiness_probe: Probe | None = None,
+        experimental_options: dict[str, Any] | None = None,
         include_oidc_identity_token: bool = False,
         verbose: bool = False,
         client: _Client | None = None,
@@ -854,13 +857,20 @@ class _Sandbox(_Object, type_prefix="sb"):
         """Create a sandbox using the V2 backend.
 
         Supported features include exec, encrypted tunnels, wait/poll/terminate,
-        CPU and memory configuration, region placement, volumes, cloud bucket mounts
-        (with static credentials via `secret=...` or `oidc_auth_role_arn`), OIDC
-        identity tokens, proxies, and filesystem snapshots.
+        CPU and memory configuration, region placement, private IPv6 networking
+        (i6pn), volumes, cloud bucket mounts (with static credentials via
+        `secret=...` or `oidc_auth_role_arn`), OIDC identity tokens, proxies, and
+        filesystem snapshots.
 
         Features like tags, memory snapshots, network file systems, GPUs, and custom
         domains are not supported.
 
+        Set `i6pn=True` to enable private IPv6 networking so sandboxes in the same
+        workspace can address each other directly at their `i6pn.modal.local`
+        address. i6pn only connects sandboxes co-located on the same routable
+        network, so pin every sandbox in the group to the same specific region
+        (e.g. `region="us-east-1"`).
+
         V2 sandboxes created with this method are not currently returned by
         `Sandbox.list()` and cannot be looked up with `Sandbox.from_name()`.
         Store `sandbox.object_id` if you need to retrieve the sandbox later, and
@@ -878,6 +888,12 @@ class _Sandbox(_Object, type_prefix="sb"):
         if block_network and (encrypted_ports or h2_ports or unencrypted_ports):
             raise InvalidError("Cannot specify open ports when `block_network` is enabled")
 
+        if block_network and i6pn:
+            raise InvalidError(
+                "`block_network` disables all networking, including i6pn. To keep i6pn while blocking "
+                "public egress, use an empty outbound allowlist (`outbound_cidr_allowlist=[]`) instead."
+            )
+
         validated_volumes = validate_volumes(volumes)
         cloud_bucket_mounts = [(k, v) for k, v in validated_volumes if isinstance(v, _CloudBucketMount)]
         validated_volumes = [(k, v) for k, v in validated_volumes if isinstance(v, _Volume)]
@@ -915,19 +931,22 @@ class _Sandbox(_Object, type_prefix="sb"):
         if block_network:
             if outbound_cidr_allowlist is not None:
                 raise InvalidError("`outbound_cidr_allowlist` cannot be used when `block_network` is enabled")
+            if outbound_domain_allowlist is not None:
+                raise InvalidError("`outbound_domain_allowlist` cannot be used when `block_network` is enabled")
             if inbound_cidr_allowlist is not None:
                 raise InvalidError("`inbound_cidr_allowlist` cannot be used when `block_network` is enabled")
             network_access = api_pb2.NetworkAccess(
                 network_access_type=api_pb2.NetworkAccess.NetworkAccessType.BLOCKED,
             )
-        elif outbound_cidr_allowlist is None:
+        elif outbound_domain_allowlist is None and outbound_cidr_allowlist is None:
             network_access = api_pb2.NetworkAccess(
                 network_access_type=api_pb2.NetworkAccess.NetworkAccessType.OPEN,
             )
         else:
             network_access = api_pb2.NetworkAccess(
                 network_access_type=api_pb2.NetworkAccess.NetworkAccessType.ALLOWLIST,
-                allowed_cidrs=outbound_cidr_allowlist,
+                allowed_cidrs=list(outbound_cidr_allowlist or []),
+                allowed_domains=list(outbound_domain_allowlist or []),
             )
 
         async def _load(self: _Sandbox, resolver: Resolver, load_context: LoadContext, _existing_object_id: str | None):
@@ -972,9 +991,13 @@ class _Sandbox(_Object, type_prefix="sb"):
                 name=name,
                 include_oidc_identity_token=include_oidc_identity_token,
                 inbound_cidr_allowlist=list(inbound_cidr_allowlist) if inbound_cidr_allowlist is not None else [],
+                i6pn_enabled=i6pn,
                 volume_mounts=volume_mounts,
                 cloud_bucket_mounts=cloud_bucket_mounts_to_proto(cloud_bucket_mounts),
                 readiness_probe=(readiness_probe._to_proto() if readiness_probe else None),
+                experimental_options_v2=(
+                    {k: str(v) for k, v in experimental_options.items()} if experimental_options else None
+                ),
             )
 
             create_req = api_pb2.SandboxCreateV2Request(

{modal-1.5.2.dev0 → modal-1.5.2.dev2}/modal/sandbox.pyi

@@ -402,7 +402,9 @@ class _Sandbox(modal._object._Object):
         region: typing.Union[str, collections.abc.Sequence[str], None] = None,
         block_network: bool = False,
         outbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+        outbound_domain_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
         inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+        i6pn: bool = False,
         volumes: dict[
             typing.Union[str, os.PathLike],
             typing.Union[modal.volume._Volume, modal.cloud_bucket_mount._CloudBucketMount],
@@ -413,6 +415,7 @@ class _Sandbox(modal._object._Object):
         unencrypted_ports: collections.abc.Sequence[int] = [],
         proxy: typing.Optional[modal.proxy._Proxy] = None,
         readiness_probe: typing.Optional[Probe] = None,
+        experimental_options: typing.Optional[dict[str, typing.Any]] = None,
         include_oidc_identity_token: bool = False,
         verbose: bool = False,
         client: typing.Optional[modal.client._Client] = None,
@@ -420,13 +423,20 @@ class _Sandbox(modal._object._Object):
         """Create a sandbox using the V2 backend.
 
         Supported features include exec, encrypted tunnels, wait/poll/terminate,
-        CPU and memory configuration, region placement, volumes, cloud bucket mounts
-        (with static credentials via `secret=...` or `oidc_auth_role_arn`), OIDC
-        identity tokens, proxies, and filesystem snapshots.
+        CPU and memory configuration, region placement, private IPv6 networking
+        (i6pn), volumes, cloud bucket mounts (with static credentials via
+        `secret=...` or `oidc_auth_role_arn`), OIDC identity tokens, proxies, and
+        filesystem snapshots.
 
         Features like tags, memory snapshots, network file systems, GPUs, and custom
         domains are not supported.
 
+        Set `i6pn=True` to enable private IPv6 networking so sandboxes in the same
+        workspace can address each other directly at their `i6pn.modal.local`
+        address. i6pn only connects sandboxes co-located on the same routable
+        network, so pin every sandbox in the group to the same specific region
+        (e.g. `region="us-east-1"`).
+
         V2 sandboxes created with this method are not currently returned by
         `Sandbox.list()` and cannot be looked up with `Sandbox.from_name()`.
         Store `sandbox.object_id` if you need to retrieve the sandbox later, and
@@ -1625,7 +1635,9 @@ class Sandbox(modal.object.Object):
             region: typing.Union[str, collections.abc.Sequence[str], None] = None,
             block_network: bool = False,
             outbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+            outbound_domain_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
             inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+            i6pn: bool = False,
             volumes: dict[
                 typing.Union[str, os.PathLike],
                 typing.Union[modal.volume.Volume, modal.cloud_bucket_mount.CloudBucketMount],
@@ -1636,6 +1648,7 @@ class Sandbox(modal.object.Object):
             unencrypted_ports: collections.abc.Sequence[int] = [],
             proxy: typing.Optional[modal.proxy.Proxy] = None,
             readiness_probe: typing.Optional[Probe] = None,
+            experimental_options: typing.Optional[dict[str, typing.Any]] = None,
             include_oidc_identity_token: bool = False,
             verbose: bool = False,
             client: typing.Optional[modal.client.Client] = None,
@@ -1643,13 +1656,20 @@ class Sandbox(modal.object.Object):
             """Create a sandbox using the V2 backend.
 
             Supported features include exec, encrypted tunnels, wait/poll/terminate,
-            CPU and memory configuration, region placement, volumes, cloud bucket mounts
-            (with static credentials via `secret=...` or `oidc_auth_role_arn`), OIDC
-            identity tokens, proxies, and filesystem snapshots.
+            CPU and memory configuration, region placement, private IPv6 networking
+            (i6pn), volumes, cloud bucket mounts (with static credentials via
+            `secret=...` or `oidc_auth_role_arn`), OIDC identity tokens, proxies, and
+            filesystem snapshots.
 
             Features like tags, memory snapshots, network file systems, GPUs, and custom
             domains are not supported.
 
+            Set `i6pn=True` to enable private IPv6 networking so sandboxes in the same
+            workspace can address each other directly at their `i6pn.modal.local`
+            address. i6pn only connects sandboxes co-located on the same routable
+            network, so pin every sandbox in the group to the same specific region
+            (e.g. `region="us-east-1"`).
+
             V2 sandboxes created with this method are not currently returned by
             `Sandbox.list()` and cannot be looked up with `Sandbox.from_name()`.
             Store `sandbox.object_id` if you need to retrieve the sandbox later, and
@@ -1675,7 +1695,9 @@ class Sandbox(modal.object.Object):
             region: typing.Union[str, collections.abc.Sequence[str], None] = None,
             block_network: bool = False,
             outbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+            outbound_domain_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
             inbound_cidr_allowlist: typing.Optional[collections.abc.Sequence[str]] = None,
+            i6pn: bool = False,
             volumes: dict[
                 typing.Union[str, os.PathLike],
                 typing.Union[modal.volume.Volume, modal.cloud_bucket_mount.CloudBucketMount],
@@ -1686,6 +1708,7 @@ class Sandbox(modal.object.Object):
             unencrypted_ports: collections.abc.Sequence[int] = [],
             proxy: typing.Optional[modal.proxy.Proxy] = None,
             readiness_probe: typing.Optional[Probe] = None,
+            experimental_options: typing.Optional[dict[str, typing.Any]] = None,
             include_oidc_identity_token: bool = False,
             verbose: bool = False,
             client: typing.Optional[modal.client.Client] = None,
@@ -1693,13 +1716,20 @@ class Sandbox(modal.object.Object):
             """Create a sandbox using the V2 backend.
 
             Supported features include exec, encrypted tunnels, wait/poll/terminate,
-            CPU and memory configuration, region placement, volumes, cloud bucket mounts
-            (with static credentials via `secret=...` or `oidc_auth_role_arn`), OIDC
-            identity tokens, proxies, and filesystem snapshots.
+            CPU and memory configuration, region placement, private IPv6 networking
+            (i6pn), volumes, cloud bucket mounts (with static credentials via
+            `secret=...` or `oidc_auth_role_arn`), OIDC identity tokens, proxies, and
+            filesystem snapshots.
 
             Features like tags, memory snapshots, network file systems, GPUs, and custom
             domains are not supported.
 
+            Set `i6pn=True` to enable private IPv6 networking so sandboxes in the same
+            workspace can address each other directly at their `i6pn.modal.local`
+            address. i6pn only connects sandboxes co-located on the same routable
+            network, so pin every sandbox in the group to the same specific region
+            (e.g. `region="us-east-1"`).
+
             V2 sandboxes created with this method are not currently returned by
             `Sandbox.list()` and cannot be looked up with `Sandbox.from_name()`.
             Store `sandbox.object_id` if you need to retrieve the sandbox later, and

{modal-1.5.2.dev0 → modal-1.5.2.dev2}/modal.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modal
-Version: 1.5.2.dev0
+Version: 1.5.2.dev2
 Summary: Python client library for Modal
 Author-email: Modal Labs <support@modal.com>
 License-Expression: Apache-2.0