modal 1.6.2.dev8__py3-none-any.whl → 1.6.2.dev9__py3-none-any.whl

modal/_workspace.py

@@ -9,6 +9,7 @@ from typing import Optional
 from google.protobuf.empty_pb2 import Empty
 
 from modal.exception import DeprecationError, InvalidError
+from modal.types import ServiceUserInfo
 from modal_proto import api_pb2
 
 from ._load_context import LoadContext
@@ -129,6 +130,15 @@ class _Workspace(_Object, type_prefix="ac"):
         """Namespace for Workspace settings APIs."""
         return _WorkspaceSettingsManager(self)
 
+    @property
+    def service_users(self) -> "_WorkspaceServiceUserManager":
+        """Namespace for managing Service Users in a Workspace.
+
+        See [the guide](https://modal.com/docs/guide/service-users) for more information about Service
+        Users.
+        """
+        return _WorkspaceServiceUserManager(self)
+
 
 class _WorkspaceProxyTokenManager:
     """mdmd:namespace"""
@@ -556,3 +566,169 @@ class _WorkspaceSettingsManager:
                 await self._set_default_environment(value)
             case _:
                 raise ValueError(f"Unknown setting {name!r}. Valid settings: {', '.join(self._valid_settings())}")
+
+
+class _WorkspaceServiceUserManager:
+    """mdmd:namespace"""
+
+    def __init__(self, workspace: _Workspace):
+        """mdmd:hidden"""
+        self._workspace = workspace
+
+    async def create(self, name: str, *, expires_in: int | None) -> TokenData:
+        """Create a new Service User in the current workspace.
+
+        To call this function, you are required to have Manager permissions in the Workspace.
+
+        Args:
+            name: The name of the new Service User. Must consistent only of alphanumeric, '-', or '_'
+                characters.
+            expires_in: An expiration time, in seconds, after which the token will stop working. If
+                `None`, the token will never expire.
+
+        Returns:
+            A `TokenData` dataclass containing the credentials for the Service User. Note that this
+            is the only time you will be able to view these credentials.
+
+        Examples:
+
+        ```python notest
+        ws = modal.Workspace.from_context()
+
+        # Creates a Service User named "test-service-user", whose credentials expire after one year.
+        service_user_token_data = ws.service_users.create(
+            "test-service-user",
+            expires_in=datetime.timedelta(days=365).total_seconds(),
+        )
+        ```
+        """
+        if not self._workspace._is_hydrated:
+            await self._workspace.hydrate()
+
+        if expires_in is None:
+            req = api_pb2.ServiceUserCreateRequest(name=name)
+        else:
+            req = api_pb2.ServiceUserCreateRequest(name=name, expires_in_seconds=expires_in)
+
+        resp = await self._workspace.client._stub.ServiceUserCreate(req)
+
+        return TokenData(token_id=resp.token_id, token_secret=resp.token_secret)
+
+    async def set_role(
+        self,
+        service_user_name: str,
+        environment_name: str,
+        *,
+        role: str,
+    ) -> None:
+        """Set the role of a specified Service User within an Environment.
+
+        To call this function, you are required to have Manager permissions in the Workspace.
+
+        Args:
+            service_user_name: The name of the Service User.
+            environment_name: The name of the Environment to which the Service User's new role will
+                apply.
+            role: The access level to grant this Service User. Must be one of the strings `"no-access"`,
+                `"viewer"`, or `"contributor"`.
+
+        Examples:
+
+        ```python notest
+        ws = modal.Workspace.from_context()
+        # Grants Service User "test-service-user" the Viewer role in Environment "production"
+        ws.service_users.set_role("test-service-user", "production", role="viewer")
+
+        # Revokes access to "production" from Service User "test-service-user"
+        ws.service_users.set_role("test-service-user", "production", role="no-access")
+        ```
+        """
+
+        if not self._workspace._is_hydrated:
+            await self._workspace.hydrate()
+
+        from ._environments import _Environment
+
+        env = _Environment.from_name(environment_name, client=self._workspace.client)
+        await env.hydrate()
+
+        await self._workspace.client._stub.EnvironmentRoleSet(
+            api_pb2.EnvironmentRoleSetRequest(
+                service_user_name=service_user_name,
+                environment_id=env.object_id,
+                role_str=role,
+            )
+        )
+
+    async def info(self, name: str) -> ServiceUserInfo:
+        """Get information about a specific Service User.
+
+        To call this function, you are required to have Manager permissions in the Workspace.
+
+        Args:
+            name: The name of the Service User to introspect.
+
+        Returns:
+            A `ServiceUserInfo` dataclass containing information about the Service User.
+
+        Examples:
+
+        ```python notest
+        ws = modal.Workspace.from_context()
+        service_user = ws.service_users.info("test-service-user")
+        ```
+        """
+
+        if not self._workspace._is_hydrated:
+            await self._workspace.hydrate()
+
+        resp = await self._workspace.client._stub.ServiceUserInfo(
+            api_pb2.ServiceUserInfoRequest(service_user_name=name)
+        )
+
+        return ServiceUserInfo._from_proto(resp.service_user)
+
+    async def list(self) -> list[ServiceUserInfo]:
+        """List all Service Users in the current workspace.
+
+        To call this function, you are required to have Manager permissions in the Workspace.
+
+        Returns:
+            A list of `ServiceUserInfo` dataclasses.
+
+        Examples:
+
+        ```python notest
+        ws = modal.Workspace.from_context()
+        for service_user in ws.service_users.list():
+            print(service_user.name)
+        ```
+        """
+
+        if not self._workspace._is_hydrated:
+            await self._workspace.hydrate()
+
+        resp = await self._workspace.client._stub.ServiceUserList(Empty())
+
+        return [ServiceUserInfo._from_proto(su) for su in resp.service_users]
+
+    async def delete(self, name: str) -> None:
+        """Permanently delete a Service User.
+
+        To call this function, you are required to have Manager permissions in the Workspace.
+
+        Args:
+            name: The name of the Service User to delete.
+
+        Examples:
+
+        ```python notest
+        ws = modal.Workspace.from_context()
+        ws.service_users.delete("test-service-user")
+        ```
+        """
+
+        if not self._workspace._is_hydrated:
+            await self._workspace.hydrate()
+
+        await self._workspace.client._stub.ServiceUserDelete(api_pb2.ServiceUserDeleteRequest(service_user_name=name))

modal/cli/import_refs.py

@@ -7,11 +7,14 @@ or the app lookup of `modal deploy some_file.py`.
 These functions are only called by the Modal CLI, not in tasks.
 """
 
+import atexit
 import dataclasses
 import importlib
 import importlib.util
 import inspect
+import shutil
 import sys
+import tempfile
 import typing
 from collections import defaultdict
 from dataclasses import dataclass
@@ -60,15 +63,40 @@ def parse_import_ref(object_ref: str, use_module_mode: bool = False, command: st
 
 DEFAULT_APP_NAME = "app"
 
+STDIN_REF = "-"
+STDIN_MODULE_NAME = "modal_stdin_app"
 
-def import_file_or_module(import_ref: ImportRef, base_cmd: str = ""):
+
+def _write_stdin_script() -> str:
+    if sys.stdin is None or sys.stdin.isatty():
+        raise InvalidError("No script was piped on stdin. Usage: `cat my_app.py | modal run -`")
+    source = sys.stdin.read()
+    # The file must outlive the import: the entrypoint mount is built from it when the App runs.
+    tmp_dir = tempfile.mkdtemp(prefix="modal-stdin-")
+    atexit.register(shutil.rmtree, tmp_dir, ignore_errors=True)
+    script_path = Path(tmp_dir) / f"{STDIN_MODULE_NAME}.py"
+    script_path.write_text(source)
+    return str(script_path)
+
+
+def import_file_or_module(import_ref: ImportRef, base_cmd: str = "", allow_stdin: bool = False):
     if "" not in sys.path:
         # When running from a CLI like `modal run`
         # the current working directory isn't added to sys.path
         # so we add it in order to make module path specification possible
         sys.path.insert(0, "")  # "" means the current working directory
 
-    if not import_ref.file_or_module.endswith(".py") or import_ref.use_module_mode:
+    from_stdin = import_ref.file_or_module == STDIN_REF
+    if from_stdin:
+        if not allow_stdin:
+            raise InvalidError(f"`{base_cmd}` does not support reading a script from stdin.")
+        if import_ref.use_module_mode:
+            raise InvalidError("Reading a script from stdin (`-`) can't be combined with the -m flag.")
+        script_path = _write_stdin_script()
+    else:
+        script_path = import_ref.file_or_module
+
+    if not script_path.endswith(".py") or import_ref.use_module_mode:
         if not import_ref.use_module_mode:
             raise InvalidError(
                 "Python module paths must be specified with the -m flag. "
@@ -82,7 +110,7 @@ def import_file_or_module(import_ref: ImportRef, base_cmd: str = ""):
     else:
         # when using a script path, that scripts directory should also be on the path as it is
         # with `python some/script.py`
-        full_path = Path(import_ref.file_or_module).resolve()
+        full_path = Path(script_path).resolve()
         if "." in full_path.name.removesuffix(".py"):
             raise InvalidError(
                 f"Invalid Modal source filename: {full_path.name!r}."
@@ -90,10 +118,10 @@ def import_file_or_module(import_ref: ImportRef, base_cmd: str = ""):
             )
         sys.path.insert(0, str(full_path.parent))
 
-        module_name = inspect.getmodulename(import_ref.file_or_module)
+        module_name = inspect.getmodulename(script_path)
         assert module_name is not None
         # Import the module - see https://docs.python.org/3/library/importlib.html#importing-a-source-file-directly
-        spec = importlib.util.spec_from_file_location(module_name, import_ref.file_or_module)
+        spec = importlib.util.spec_from_file_location(module_name, script_path)
         assert spec is not None
         module = importlib.util.module_from_spec(spec)
         sys.modules[module_name] = module
@@ -103,7 +131,7 @@ def import_file_or_module(import_ref: ImportRef, base_cmd: str = ""):
                 spec.loader.exec_module(module)
         except Exception as exc:
             if isinstance(exc, ImportError) and "attempted relative import with no known parent package" in str(exc):
-                if import_ref.file_or_module and import_ref.command and not import_ref.use_module_mode:
+                if import_ref.command and not import_ref.use_module_mode and not from_stdin:
                     file_path = Path(import_ref.file_or_module)
                     suggested_module_path = ".".join(file_path.parts).removesuffix(".py").lstrip(".")
                     suffix = f"::{import_ref.object_path}" if import_ref.object_path else ""
@@ -356,6 +384,7 @@ def import_and_filter(
     accept_local_entrypoint=True,
     accept_webhook=False,
     accept_service_functions=False,
+    allow_stdin=False,
 ) -> tuple[Runnable | None, list[CLICommand]]:
     """Takes a function ref string and returns a single determined "runnable" to use, and a list of all available
     runnables.
@@ -371,7 +400,7 @@ def import_and_filter(
     3. if there is a single method (within a class) that one is used
     """
     # all commands:
-    module = import_file_or_module(import_ref, base_cmd)
+    module = import_file_or_module(import_ref, base_cmd, allow_stdin=allow_stdin)
     cli_commands = list_cli_commands(
         dict(inspect.getmembers(module)),
         include_service_functions=accept_service_functions,

modal/cli/run.py

@@ -2,7 +2,9 @@
 import asyncio
 import functools
 import inspect
+import os
 import re
+import stat
 import sys
 import time
 import typing
@@ -25,6 +27,7 @@ from ..runner import DEPLOYMENT_STRATEGY_TYPE, deploy_app, run_app
 from ..serving import serve_app
 from ._help import ModalCommand, ModalGroup, _consume_global_options, _global_option_token_length
 from .import_refs import (
+    STDIN_REF,
     CLICommand,
     MethodReference,
     _get_runnable_app,
@@ -399,6 +402,14 @@ def _get_click_command_for_local_entrypoint(app: App, entrypoint: LocalEntrypoin
         return click.command(cls=ModalCommand)(with_click_options)
 
 
+def _stdin_is_piped() -> bool:
+    try:
+        mode = os.fstat(sys.stdin.fileno()).st_mode
+    except (AttributeError, OSError, ValueError):
+        return False
+    return stat.S_ISFIFO(mode) or stat.S_ISREG(mode)
+
+
 def _get_runnable_list(all_usable_commands: list[CLICommand]) -> str:
     usable_command_lines = []
     for cmd in all_usable_commands:
@@ -428,6 +439,8 @@ class RunGroup(ModalGroup):
             elif arg == "--":
                 func_ref_index += 1
                 break
+            elif arg == STDIN_REF:
+                break
             elif param := option_params.get(arg.split("=", 1)[0]):
                 func_ref_index += 1 if "=" in arg or param.is_flag else param.nargs + 1
             elif arg.startswith("-"):
@@ -435,6 +448,14 @@ class RunGroup(ModalGroup):
             else:
                 break
 
+        missing_func_ref = func_ref_index >= len(args)
+        requests_help = any(arg in ctx.help_option_names for arg in args)
+        if missing_func_ref and not requests_help and not ctx.resilient_parsing and _stdin_is_piped():
+            raise click.UsageError(
+                f"Missing FUNC_REF. To read the script from stdin, pass `{STDIN_REF}`: `cat my_app.py | modal run -`",
+                ctx,
+            )
+
         args[:] = _consume_global_options(ctx, args[:func_ref_index]) + args[func_ref_index:]
         return click.Group.parse_args(self, ctx, args)
 
@@ -448,9 +469,23 @@ class RunGroup(ModalGroup):
         func_ref = cmd_name
 
         import_ref = parse_import_ref(func_ref, use_module_mode=ctx.params["m"], command="modal run")
+        from_stdin = import_ref.file_or_module == STDIN_REF
+        if from_stdin and ctx.params["interactive"]:
+            raise ClickException("Interactive mode can't be used when reading a script from stdin.")
         runnable, all_usable_commands = import_and_filter(
-            import_ref, base_cmd="modal run", accept_local_entrypoint=True, accept_webhook=False
+            import_ref, base_cmd="modal run", accept_local_entrypoint=True, accept_webhook=False, allow_stdin=True
         )
+        if not runnable and from_stdin:
+            help_header = (
+                "Couldn't determine what to run from the script on stdin. Define a single "
+                "`@app.local_entrypoint()`, or save the script to a file and pass `my_app.py::my_function`."
+            )
+            if all_usable_commands:
+                help_footer = "The script has the following functions and local entrypoints:\n"
+                help_footer += _get_runnable_list(all_usable_commands)
+            else:
+                help_footer = "The script has no functions or local entrypoints."
+            raise ClickException(f"{help_header}\n\n{help_footer}")
         if not runnable:
             help_header = (
                 "Specify a Modal Function or local entrypoint to run. E.g.\n"
@@ -535,6 +570,21 @@ def run(
     ```
     modal run -m my_project.my_app
     ```
+
+    Pass `-` to read the script from stdin. The script must have a single local
+    entrypoint (or a single function):
+
+    ```
+    modal run - <<'EOF'
+    import modal
+
+    app = modal.App()
+
+    @app.function()
+    def hello():
+        print("hello from Modal")
+    EOF
+    ```
     """
     ctx.ensure_object(dict)
     ctx.obj["name"] = name

modal/client.pyi

@@ -80,7 +80,7 @@ class _Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.6.2.dev8",
+        version: str = "1.6.2.dev9",
         *,
         oauth_credentials: typing.Optional[_OAuthCredentials] = None,
     ):
@@ -290,7 +290,7 @@ class Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.6.2.dev8",
+        version: str = "1.6.2.dev9",
         *,
         oauth_credentials: typing.Optional[_OAuthCredentials] = None,
     ):

modal/functions.pyi

@@ -619,7 +619,7 @@ class Function(
 
     _call_generator: ___call_generator_spec
 
-    class __remote_spec(typing_extensions.Protocol[P_INNER, ReturnType_INNER]):
+    class __remote_spec(typing_extensions.Protocol[ReturnType_INNER, P_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> ReturnType_INNER:
             """Calls the function remotely, executing it with the given arguments and returning the execution's result.
 
@@ -644,7 +644,7 @@ class Function(
             """
             ...
 
-    remote: __remote_spec[modal._functions.P, modal._functions.ReturnType]
+    remote: __remote_spec[modal._functions.ReturnType, modal._functions.P]
 
     class __remote_gen_spec(typing_extensions.Protocol):
         def __call__(self, /, *args, **kwargs) -> typing.Generator[typing.Any, None, None]:
@@ -694,7 +694,7 @@ class Function(
         """
         ...
 
-    class ___experimental_spawn_spec(typing_extensions.Protocol[P_INNER, ReturnType_INNER]):
+    class ___experimental_spawn_spec(typing_extensions.Protocol[ReturnType_INNER, P_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> FunctionCall[ReturnType_INNER]:
             """[Experimental] Calls the function with the given arguments, without waiting for the results.
 
@@ -727,7 +727,7 @@ class Function(
             """
             ...
 
-    _experimental_spawn: ___experimental_spawn_spec[modal._functions.P, modal._functions.ReturnType]
+    _experimental_spawn: ___experimental_spawn_spec[modal._functions.ReturnType, modal._functions.P]
 
     class ___spawn_map_inner_spec(typing_extensions.Protocol[P_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> None: ...
@@ -735,7 +735,7 @@ class Function(
 
     _spawn_map_inner: ___spawn_map_inner_spec[modal._functions.P]
 
-    class __spawn_spec(typing_extensions.Protocol[P_INNER, ReturnType_INNER]):
+    class __spawn_spec(typing_extensions.Protocol[ReturnType_INNER, P_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> FunctionCall[ReturnType_INNER]:
             """Calls the function with the given arguments, without waiting for the results.
 
@@ -768,7 +768,7 @@ class Function(
             """
             ...
 
-    spawn: __spawn_spec[modal._functions.P, modal._functions.ReturnType]
+    spawn: __spawn_spec[modal._functions.ReturnType, modal._functions.P]
 
     @property
     def _raw_f_(self) -> collections.abc.Callable[..., typing.Any]: ...

modal/types.py

@@ -441,6 +441,43 @@ class TokenData:
     token_secret: str
 
 
+@dataclass(frozen=True)
+class ServiceUserInfo:
+    """A lightweight dataclass containing metadata about a Modal Service User."""
+
+    service_user_id: str
+    name: str
+    token_id: str
+    created_by: str
+    created_at: datetime
+    last_used_at: datetime | None
+    expires_at: datetime | None
+
+    # Environment Name -> Role
+    environment_roles: dict[str, str]
+
+    @classmethod
+    def _from_proto(cls, proto: api_pb2.ServiceUser) -> "ServiceUserInfo":
+        created_at = datetime.fromtimestamp(proto.created_at, tz=timezone.utc)
+        last_used_at = datetime.fromtimestamp(proto.last_used_at, tz=timezone.utc) if proto.last_used_at else None
+        expires_at = datetime.fromtimestamp(proto.expires_at, tz=timezone.utc) if proto.expires_at else None
+
+        environment_roles: dict[str, str] = {}
+        for item in proto.environment_roles:
+            environment_roles[item.environment_name] = item.role_str
+
+        return cls(
+            service_user_id=proto.service_user_id,
+            name=proto.name,
+            token_id=proto.token_id,
+            created_by=proto.created_by,
+            created_at=created_at,
+            last_used_at=last_used_at,
+            expires_at=expires_at,
+            environment_roles=environment_roles,
+        )
+
+
 @dataclass(frozen=True)
 class ProxyTokenInfo:
     """Metadata about a proxy token, not including the token secret."""

modal/workspace.py

@@ -9,6 +9,7 @@ from ._workspace import (
     _WorkspaceBillingManager,
     _WorkspaceMembersManager,
     _WorkspaceProxyTokenManager,
+    _WorkspaceServiceUserManager,
     _WorkspaceSettingsManager,
 )
 
@@ -17,6 +18,7 @@ WorkspaceMembersManager = synchronize_api(_WorkspaceMembersManager, target_modul
 WorkspaceBillingManager = synchronize_api(_WorkspaceBillingManager, target_module=__name__)
 WorkspaceProxyTokenManager = synchronize_api(_WorkspaceProxyTokenManager, target_module=__name__)
 WorkspaceSettingsManager = synchronize_api(_WorkspaceSettingsManager, target_module=__name__)
+WorkspaceServiceUserManager = synchronize_api(_WorkspaceServiceUserManager, target_module=__name__)
 
 __all__ = [
     "ProxyTokenInfo",
@@ -25,6 +27,7 @@ __all__ = [
     "WorkspaceMemberInfo",
     "WorkspaceMembersManager",
     "WorkspaceProxyTokenManager",
+    "WorkspaceServiceUserManager",
     "WorkspaceSettingsManager",
     "WorkspaceSettings",
 ]

modal/workspace.pyi

@@ -186,6 +186,15 @@ class Workspace(modal.object.Object):
         """Namespace for Workspace settings APIs."""
         ...
 
+    @property
+    def service_users(self) -> WorkspaceServiceUserManager:
+        """Namespace for managing Service Users in a Workspace.
+
+        See [the guide](https://modal.com/docs/guide/service-users) for more information about Service
+        Users.
+        """
+        ...
+
 class WorkspaceMembersManager:
     """mdmd:namespace"""
     def __init__(self, workspace: Workspace):
@@ -720,3 +729,242 @@ class WorkspaceSettingsManager:
             ...
 
     set: __set_spec
+
+class WorkspaceServiceUserManager:
+    """mdmd:namespace"""
+    def __init__(self, workspace: Workspace):
+        """mdmd:hidden"""
+        ...
+
+    class __create_spec(typing_extensions.Protocol):
+        def __call__(self, /, name: str, *, expires_in: typing.Optional[int]) -> modal.types.TokenData:
+            """Create a new Service User in the current workspace.
+
+            To call this function, you are required to have Manager permissions in the Workspace.
+
+            Args:
+                name: The name of the new Service User. Must consistent only of alphanumeric, '-', or '_'
+                    characters.
+                expires_in: An expiration time, in seconds, after which the token will stop working. If
+                    `None`, the token will never expire.
+
+            Returns:
+                A `TokenData` dataclass containing the credentials for the Service User. Note that this
+                is the only time you will be able to view these credentials.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+
+            # Creates a Service User named "test-service-user", whose credentials expire after one year.
+            service_user_token_data = ws.service_users.create(
+                "test-service-user",
+                expires_in=datetime.timedelta(days=365).total_seconds(),
+            )
+            ```
+            """
+            ...
+
+        async def aio(self, /, name: str, *, expires_in: typing.Optional[int]) -> modal.types.TokenData:
+            """Create a new Service User in the current workspace.
+
+            To call this function, you are required to have Manager permissions in the Workspace.
+
+            Args:
+                name: The name of the new Service User. Must consistent only of alphanumeric, '-', or '_'
+                    characters.
+                expires_in: An expiration time, in seconds, after which the token will stop working. If
+                    `None`, the token will never expire.
+
+            Returns:
+                A `TokenData` dataclass containing the credentials for the Service User. Note that this
+                is the only time you will be able to view these credentials.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+
+            # Creates a Service User named "test-service-user", whose credentials expire after one year.
+            service_user_token_data = ws.service_users.create(
+                "test-service-user",
+                expires_in=datetime.timedelta(days=365).total_seconds(),
+            )
+            ```
+            """
+            ...
+
+    create: __create_spec
+
+    class __set_role_spec(typing_extensions.Protocol):
+        def __call__(self, /, service_user_name: str, environment_name: str, *, role: str) -> None:
+            """Set the role of a specified Service User within an Environment.
+
+            To call this function, you are required to have Manager permissions in the Workspace.
+
+            Args:
+                service_user_name: The name of the Service User.
+                environment_name: The name of the Environment to which the Service User's new role will
+                    apply.
+                role: The access level to grant this Service User. Must be one of the strings `"no-access"`,
+                    `"viewer"`, or `"contributor"`.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            # Grants Service User "test-service-user" the Viewer role in Environment "production"
+            ws.service_users.set_role("test-service-user", "production", role="viewer")
+
+            # Revokes access to "production" from Service User "test-service-user"
+            ws.service_users.set_role("test-service-user", "production", role="no-access")
+            ```
+            """
+            ...
+
+        async def aio(self, /, service_user_name: str, environment_name: str, *, role: str) -> None:
+            """Set the role of a specified Service User within an Environment.
+
+            To call this function, you are required to have Manager permissions in the Workspace.
+
+            Args:
+                service_user_name: The name of the Service User.
+                environment_name: The name of the Environment to which the Service User's new role will
+                    apply.
+                role: The access level to grant this Service User. Must be one of the strings `"no-access"`,
+                    `"viewer"`, or `"contributor"`.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            # Grants Service User "test-service-user" the Viewer role in Environment "production"
+            ws.service_users.set_role("test-service-user", "production", role="viewer")
+
+            # Revokes access to "production" from Service User "test-service-user"
+            ws.service_users.set_role("test-service-user", "production", role="no-access")
+            ```
+            """
+            ...
+
+    set_role: __set_role_spec
+
+    class __info_spec(typing_extensions.Protocol):
+        def __call__(self, /, name: str) -> modal.types.ServiceUserInfo:
+            """Get information about a specific Service User.
+
+            To call this function, you are required to have Manager permissions in the Workspace.
+
+            Args:
+                name: The name of the Service User to introspect.
+
+            Returns:
+                A `ServiceUserInfo` dataclass containing information about the Service User.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            service_user = ws.service_users.info("test-service-user")
+            ```
+            """
+            ...
+
+        async def aio(self, /, name: str) -> modal.types.ServiceUserInfo:
+            """Get information about a specific Service User.
+
+            To call this function, you are required to have Manager permissions in the Workspace.
+
+            Args:
+                name: The name of the Service User to introspect.
+
+            Returns:
+                A `ServiceUserInfo` dataclass containing information about the Service User.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            service_user = ws.service_users.info("test-service-user")
+            ```
+            """
+            ...
+
+    info: __info_spec
+
+    class __list_spec(typing_extensions.Protocol):
+        def __call__(self, /) -> list[modal.types.ServiceUserInfo]:
+            """List all Service Users in the current workspace.
+
+            To call this function, you are required to have Manager permissions in the Workspace.
+
+            Returns:
+                A list of `ServiceUserInfo` dataclasses.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            for service_user in ws.service_users.list():
+                print(service_user.name)
+            ```
+            """
+            ...
+
+        async def aio(self, /) -> list[modal.types.ServiceUserInfo]:
+            """List all Service Users in the current workspace.
+
+            To call this function, you are required to have Manager permissions in the Workspace.
+
+            Returns:
+                A list of `ServiceUserInfo` dataclasses.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            for service_user in ws.service_users.list():
+                print(service_user.name)
+            ```
+            """
+            ...
+
+    list: __list_spec
+
+    class __delete_spec(typing_extensions.Protocol):
+        def __call__(self, /, name: str) -> None:
+            """Permanently delete a Service User.
+
+            To call this function, you are required to have Manager permissions in the Workspace.
+
+            Args:
+                name: The name of the Service User to delete.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            ws.service_users.delete("test-service-user")
+            ```
+            """
+            ...
+
+        async def aio(self, /, name: str) -> None:
+            """Permanently delete a Service User.
+
+            To call this function, you are required to have Manager permissions in the Workspace.
+
+            Args:
+                name: The name of the Service User to delete.
+
+            Examples:
+
+            ```python notest
+            ws = modal.Workspace.from_context()
+            ws.service_users.delete("test-service-user")
+            ```
+            """
+            ...
+
+    delete: __delete_spec

{modal-1.6.2.dev8.dist-info → modal-1.6.2.dev9.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modal
-Version: 1.6.2.dev8
+Version: 1.6.2.dev9
 Summary: Python client library for Modal
 Author-email: Modal Labs <support@modal.com>
 License-Expression: Apache-2.0

{modal-1.6.2.dev8.dist-info → modal-1.6.2.dev9.dist-info}/RECORD

@@ -32,14 +32,14 @@ modal/_tunnel.py,sha256=4M1qLFXvJLV2s_vr5vHXDtGdZr0OUNmXNj1C3lyF4qE,7360
 modal/_tunnel.pyi,sha256=WVP0dkoN__mM73ZQ-r3nHKCXvYlRMmEWW8iw2xrSY6M,14698
 modal/_type_manager.py,sha256=DWjgmjYJuOagw2erin506UUbG2H5UzZCFEekS-7hmfA,9087
 modal/_watcher.py,sha256=Ot1My6fhTp5v0NXR7-ESV8kNQqvpgozrIcvLBtf5r-U,3564
-modal/_workspace.py,sha256=IfjcknvmWKVqiltkvHFKVBAKi2EVo-nMOTVKlWCOll4,21849
+modal/_workspace.py,sha256=zZm5eo2JAyj6MYkZD61jl58ne1fp6vok7acmZ1CVl3A,27825
 modal/app.py,sha256=tAILXi3rk-d2KgdLKGMsB7awShiPBcPfEfiPLn1fGQY,74703
 modal/app.pyi,sha256=TjcJhoWwZTK2eQ_HCIChU62xSdLi6SvHVQYksy-eZ7w,88565
 modal/billing.py,sha256=E1-P_P8bJFLp-bTaggYd4BaaViImPB5UdtXiY8VeAZQ,390
 modal/billing.pyi,sha256=4m7VLYNS8IiJ2I3CJx0awvrOM6BILWRVLfdeqtAYr8M,7189
 modal/call_graph.py,sha256=XGALIDn1bLchWo_goyX23bcPjzCZcfqKUo8INIfDapo,1775
 modal/client.py,sha256=cstrL0wpXCZmcvRs7Sy3QRw9Vz8zkZy8NNk0tPe38sk,22852
-modal/client.pyi,sha256=5VcbRBy5EfVsMzw0sU9MFtyymwPi6LKigWuAYqzSums,23488
+modal/client.pyi,sha256=MB-HfDpp1QFox_pWh2XDH70EZQlFwGP4jRPYeFZP-hk,23488
 modal/cloud_bucket_mount.py,sha256=ZOg69dhIFcJcwim4JP-6s1tqwOYAfgS9806jRpspifw,7511
 modal/cloud_bucket_mount.pyi,sha256=HoPe_NG5jYdVfmTNY-ZJ3-C8Eo_FzJovl9orJRjkGbE,10252
 modal/cls.py,sha256=qoGJD590GnHHLvVhkn-BMl4ATMrw2Fg_V4evy5ZQbJQ,41784
@@ -56,7 +56,7 @@ modal/environments.pyi,sha256=drmg6yVLjpPhGJ4byOrdBEp2KRLburPrKT-FYtgNPoM,23628
 modal/exception.py,sha256=L-dUKust6feZzn5qhTVusSAr0IBa4Wa3qIA225IT_lY,12334
 modal/file_pattern_matcher.py,sha256=CpaNNj7oBlOSewX-AAUZCF8KDxH0_DmgwzfpVGbPYJ4,8138
 modal/functions.py,sha256=EZRcHFfnoYbvawUJnAHF5nIvoo9GX2Djy7mUmOCXmXc,258
-modal/functions.pyi,sha256=SuolW78OayX4pRq8rsIZr7SXUH6Qsf_sPagsB-YCAqE,56516
+modal/functions.pyi,sha256=Ts7fwfZP4JSuq6rkHdeaa3kGjDItYfip5jKoD_fUhZo,56516
 modal/image.py,sha256=c0lUSAoU-Ip3g5DGZ0uhdCzoWSQWh1g0i-7Rxo-Sz-I,160
 modal/image.pyi,sha256=R5rdY4P30IEm-F7A2S9CdXa6QYNk-pQwsEun9BKTyLw,61094
 modal/io_streams.py,sha256=iWwhGCcTwhNtIo2t2f-qVV3FBEK1DIi40Tm_Ai01eYA,32992
@@ -92,11 +92,11 @@ modal/serving.pyi,sha256=nKgt3i2X93NpAAZzIpbj4fiR1TIJxSXnK659w4UD2sE,3962
 modal/stream_type.py,sha256=A6320qoAAWhEfwOCZfGtymQTu5AfLfJXXgARqooTPvY,417
 modal/token_flow.py,sha256=1Os7Zw41Fh_YU8CMSWRILDKRlUZcl9pExaX_EDVdBiU,7446
 modal/token_flow.pyi,sha256=nqs_KHmwM-ssXKeWUTnMVjOgliSzZLl30Tcg6VvMzG0,2605
-modal/types.py,sha256=dF7Tm2sV2gmi6Vv7oHzQdzNmVIHgUywIfqy7vYJ-Fh4,36199
+modal/types.py,sha256=LuOQoaDt8T-1i2XOfXzy3Ym1yxHEZ08HTszhGddvCvI,37474
 modal/volume.py,sha256=wbTVEriIv3djjeUAuUWkLABgG4ppbNMmXLJeV0bev3Q,71117
 modal/volume.pyi,sha256=Rp2gw_zh8HAAHRbdDkF782tttQfyv3uzSriO-zpMXDU,67350
-modal/workspace.py,sha256=_phlb1Bxie_KR1Y9atBzkB21Q_qmRztf1JLzQYdK0qk,988
-modal/workspace.pyi,sha256=X3wZ5GWrIpxJVxya4NDKvzdxJqGRhsoc1wNgKSMOySg,26497
+modal/workspace.py,sha256=83AGrCXEN1-QhC6XfQusgWO50GOIJX_c1QKsF52wjdA,1157
+modal/workspace.pyi,sha256=S7QwyBm0wzQgR6lToTvSAKD2AdSLo0e8UbBS8TPlckU,35519
 modal/_output/__init__.py,sha256=xtGN6SPv2zvByrJ32JPao0yJKpxyCIZ-2JMTScrisuQ,28
 modal/_output/manager.py,sha256=DqEguniI8uWMFUZFX4U4gsCFpio1zQeWjJhJC_GZhi4,18286
 modal/_output/pty.py,sha256=ngkKVpU8zDOxg94LiWYmdwXavd305HQDXzjWGrHQBIM,10408
@@ -175,12 +175,12 @@ modal/cli/entry_point.py,sha256=Sy9w9C2RHG9XDalJ0Fjwr4yQc4dTEL9gVNQuDrj3woI,5050
 modal/cli/environment.py,sha256=rKnKQFsbcLXjBtYWLFRqhP1NeCjMnqvSPci7Md4ZjIM,18377
 modal/cli/function.py,sha256=gyY7cgwfxZfNRwyO1X4I1XK8xL97heoEp7CuVwPrRoI,57624
 modal/cli/image.py,sha256=Ve-PDT4XTH9KEQrZxvUc2ocAW4mLI5QfwQssaajK4MI,8073
-modal/cli/import_refs.py,sha256=gxoogHVixec1-qj_FUwhWQXqjy9yvqYCNuAYWCCFEWk,15994
+modal/cli/import_refs.py,sha256=cI9njDM4alDawlgAGsFLBQ6eP7K06aFHOp0-K7OSd_8,17093
 modal/cli/logo.py,sha256=plv82syvPb8j3qrR1A_nojZwp823t3VEXaDlrx1jkt0,3221
 modal/cli/network_file_system.py,sha256=xNvau_6fziIfbPIlVGAh1-wOGVCNko28GweAjO51LCU,7681
 modal/cli/profile.py,sha256=JbpSo5bcK2gdVx3QDrGWwnfRRG-_QtrsLAaQXnwh4K0,4782
 modal/cli/queues.py,sha256=cpoza1mEwupQoaBy7kaTqsTaWPto9tHRQrOeLXxZAUU,6951
-modal/cli/run.py,sha256=rzLG_eDO4uxcIxPQsz_PbGe8MZTcPNzA3p83HDFEcUk,24508
+modal/cli/run.py,sha256=rkAsn4aDa80JjMj1rwGwrVdlkJkazclSyvar7YSmi3Y,26410
 modal/cli/secret.py,sha256=lckWyas1J3uQm1f8D9nkWlRlmToNzmy5a-0q4IsJFCc,8254
 modal/cli/selector.py,sha256=OJr9Ua3K_l-qu3N3-I8z8oVq8lBakws2-XgfheR5p-c,4741
 modal/cli/server.py,sha256=H0u3u9S-DARMFKdYuvWJcu5s8egOQYxvRr79X_Lceeg,49723
@@ -207,7 +207,7 @@ modal/sandbox/_task_command_router_client.py,sha256=qhFXy8eyGIxwxRFZkTsxJVxsAc8c
 modal/sandbox/sandbox.py,sha256=4ekghND9qUGf5wtIQH4mVa6PHGjHgY0UN5RKryOM05k,683
 modal/sandbox/sandbox.pyi,sha256=HYxopAUYMfMEVMWgzeb4qPATPFzLkTCnqpSl9lI-3ac,150321
 modal/skills/modal/SKILL.md,sha256=Bm-0BPTYppJoeQzA-N-Re8L6-nKnV6gspJXMl4cD0P0,5490
-modal-1.6.2.dev8.dist-info/licenses/LICENSE,sha256=psuoW8kuDP96RQsdhzwOqi6fyWv0ct8CR6Jr7He_P_k,10173
+modal-1.6.2.dev9.dist-info/licenses/LICENSE,sha256=psuoW8kuDP96RQsdhzwOqi6fyWv0ct8CR6Jr7He_P_k,10173
 modal_docs/__init__.py,sha256=svYKtV8HDwDCN86zbdWqyq5T8sMdGDj0PVlzc2tIxDM,28
 modal_docs/gen_cli_docs.py,sha256=9-b8vl2EsLWD9zJqpCK8IUi5h44Bjn3i3rSdedZV4bA,6415
 modal_docs/gen_cli_docs_main.py,sha256=UPGr7O1DYTIRLwfINe2rbdh89J3cPVTU1OWL-SjxnOQ,198
@@ -231,10 +231,10 @@ modal_proto/task_command_router_pb2.py,sha256=ysC0d8p3YxwyOpP3B-qDlvE81Yo4ntQiwi
 modal_proto/task_command_router_pb2.pyi,sha256=FDcd5t3ZCmQHUjefOzg07iglrgKYcBrzFvdKIWsEMHI,50628
 modal_proto/task_command_router_pb2_grpc.py,sha256=8iGUGwEVbqOsZWPJ7OsQ9OKUGaSCf9Dr2tvb04Ww6d4,44620
 modal_proto/task_command_router_pb2_grpc.pyi,sha256=26Fq9RQo09B9KLHsgdpRuw-I6Z4-2jrXLQkuDzB-moI,15097
-modal_version/__init__.py,sha256=WsuSyNuz9p14Rv35_HGOr5gTGppmiBErxZvIpLsh-Y4,120
+modal_version/__init__.py,sha256=BO-DM7wsEgysII6-KveacoC7VbNzkiPdH-MGsOiTomQ,120
 modal_version/__main__.py,sha256=nLUbubxKx7GXNzJIkTB7M7_u8080LyLM0IS0rzFkC_c,119
-modal-1.6.2.dev8.dist-info/METADATA,sha256=Ra0MKB3MFjRNZdmVPh0Mc-HvN-Uw8yTC1onPfOiu-K0,2512
-modal-1.6.2.dev8.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
-modal-1.6.2.dev8.dist-info/entry_points.txt,sha256=An-wYgeEUnm6xzrAP9_NTSTSciYvvEWsMZILtYrvpAI,46
-modal-1.6.2.dev8.dist-info/top_level.txt,sha256=4BWzoKYREKUZ5iyPzZpjqx4G8uB5TWxXPDwibLcVa7k,43
-modal-1.6.2.dev8.dist-info/RECORD,,
+modal-1.6.2.dev9.dist-info/METADATA,sha256=m8MgmkSOJS_QswrCMRdd_b-t8D2lh7Ws830RJPwVup0,2512
+modal-1.6.2.dev9.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
+modal-1.6.2.dev9.dist-info/entry_points.txt,sha256=An-wYgeEUnm6xzrAP9_NTSTSciYvvEWsMZILtYrvpAI,46
+modal-1.6.2.dev9.dist-info/top_level.txt,sha256=4BWzoKYREKUZ5iyPzZpjqx4G8uB5TWxXPDwibLcVa7k,43
+modal-1.6.2.dev9.dist-info/RECORD,,

modal_version/__init__.py

@@ -1,4 +1,4 @@
 # Copyright Modal Labs 2026
 """Supplies the current version of the modal client library."""
 
-__version__ = "1.6.2.dev8"
+__version__ = "1.6.2.dev9"