modal 1.6.4.dev6__tar.gz → 1.6.4.dev8__tar.gz

{modal-1.6.4.dev6 → modal-1.6.4.dev8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modal
-Version: 1.6.4.dev6
+Version: 1.6.4.dev8
 Summary: Python client library for Modal
 Author-email: Modal Labs <support@modal.com>
 License-Expression: Apache-2.0

{modal-1.6.4.dev6 → modal-1.6.4.dev8}/modal/client.pyi

@@ -87,7 +87,7 @@ class _Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.6.4.dev6",
+        version: str = "1.6.4.dev8",
         *,
         oauth_credentials: typing.Optional[_OAuthCredentials] = None,
     ):
@@ -304,7 +304,7 @@ class Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.6.4.dev6",
+        version: str = "1.6.4.dev8",
         *,
         oauth_credentials: typing.Optional[_OAuthCredentials] = None,
     ):

{modal-1.6.4.dev6 → modal-1.6.4.dev8}/modal/functions.pyi

@@ -619,7 +619,7 @@ class Function(
 
     _call_generator: ___call_generator_spec
 
-    class __remote_spec(typing_extensions.Protocol[ReturnType_INNER, P_INNER]):
+    class __remote_spec(typing_extensions.Protocol[P_INNER, ReturnType_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> ReturnType_INNER:
             """Calls the function remotely, executing it with the given arguments and returning the execution's result.
 
@@ -644,7 +644,7 @@ class Function(
             """
             ...
 
-    remote: __remote_spec[modal._functions.ReturnType, modal._functions.P]
+    remote: __remote_spec[modal._functions.P, modal._functions.ReturnType]
 
     class __remote_gen_spec(typing_extensions.Protocol):
         def __call__(self, /, *args, **kwargs) -> typing.Generator[typing.Any, None, None]:
@@ -694,7 +694,7 @@ class Function(
         """
         ...
 
-    class ___experimental_spawn_spec(typing_extensions.Protocol[ReturnType_INNER, P_INNER]):
+    class ___experimental_spawn_spec(typing_extensions.Protocol[P_INNER, ReturnType_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> FunctionCall[ReturnType_INNER]:
             """[Experimental] Calls the function with the given arguments, without waiting for the results.
 
@@ -727,7 +727,7 @@ class Function(
             """
             ...
 
-    _experimental_spawn: ___experimental_spawn_spec[modal._functions.ReturnType, modal._functions.P]
+    _experimental_spawn: ___experimental_spawn_spec[modal._functions.P, modal._functions.ReturnType]
 
     class ___spawn_map_inner_spec(typing_extensions.Protocol[P_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> None: ...
@@ -735,7 +735,7 @@ class Function(
 
     _spawn_map_inner: ___spawn_map_inner_spec[modal._functions.P]
 
-    class __spawn_spec(typing_extensions.Protocol[ReturnType_INNER, P_INNER]):
+    class __spawn_spec(typing_extensions.Protocol[P_INNER, ReturnType_INNER]):
         def __call__(self, /, *args: P_INNER.args, **kwargs: P_INNER.kwargs) -> FunctionCall[ReturnType_INNER]:
             """Calls the function with the given arguments, without waiting for the results.
 
@@ -768,7 +768,7 @@ class Function(
             """
             ...
 
-    spawn: __spawn_spec[modal._functions.ReturnType, modal._functions.P]
+    spawn: __spawn_spec[modal._functions.P, modal._functions.ReturnType]
 
     @property
     def _raw_f_(self) -> collections.abc.Callable[..., typing.Any]: ...

{modal-1.6.4.dev6 → modal-1.6.4.dev8}/modal/sandbox/_task_command_router_client.py

@@ -55,6 +55,36 @@ _STREAMING_STDIN_RESUMABLE_EXCEPTIONS = (
 )
 
 
+_shared_verifying_ssl_context_instance: ssl.SSLContext | None = None
+
+
+def _shared_verifying_ssl_context() -> ssl.SSLContext:
+    """Process-wide TLS context that verifies certificates against the system CAs.
+
+    Creating a context parses the system CA bundle while holding the GIL, so one
+    per channel blocks the event loop when many Sandboxes connect at once. Every
+    Sandbox's command router channel shares this context, so it must never be
+    modified; a change would apply to every connection in the process.
+    """
+    global _shared_verifying_ssl_context_instance
+    if _shared_verifying_ssl_context_instance is None:
+        _shared_verifying_ssl_context_instance = ssl.create_default_context()
+    return _shared_verifying_ssl_context_instance
+
+
+def _unverified_ssl_context() -> ssl.SSLContext:
+    """New TLS context that skips certificate and hostname checks.
+
+    Only for local e2e servers on localhost, which use self-signed certificates.
+    Built per call so that turning verification off cannot reach the shared
+    verifying context.
+    """
+    ssl_context = ssl.SSLContext(ssl.PROTOCOL_TLS_CLIENT)
+    ssl_context.check_hostname = False
+    ssl_context.verify_mode = ssl.CERT_NONE
+    return ssl_context
+
+
 @retry(n_attempts=34, base_delay=1, max_delay=10, attempt_timeout=10, total_timeout=310)
 async def _connect_channel(channel: grpclib.client.Channel):
     """Connect to the command router channel.
@@ -320,13 +350,11 @@ class TaskCommandRouterClient:
                 raise ValueError(f"Task router URL must be https, got: {url}")
             ssl_context = None
         elif o.scheme == "https":
-            ssl_context = ssl.create_default_context()
             if is_localhost_client:
-                # Allow insecure TLS when the Modal server client points to localhost
-                # This is typically triggered from local e2e testing
                 logger.warning("Using insecure TLS for task command router because server client points to localhost")
-                ssl_context.check_hostname = False
-                ssl_context.verify_mode = ssl.CERT_NONE
+                ssl_context = _unverified_ssl_context()
+            else:
+                ssl_context = _shared_verifying_ssl_context()
         else:
             raise ValueError(f"Task router URL must be https, got: {url}")
 

{modal-1.6.4.dev6 → modal-1.6.4.dev8}/modal.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modal
-Version: 1.6.4.dev6
+Version: 1.6.4.dev8
 Summary: Python client library for Modal
 Author-email: Modal Labs <support@modal.com>
 License-Expression: Apache-2.0

{modal-1.6.4.dev6 → modal-1.6.4.dev8}/modal_version/__init__.py

@@ -1,4 +1,4 @@
 # Copyright Modal Labs 2026
 """Supplies the current version of the modal client library."""
 
-__version__ = "1.6.4.dev6"
+__version__ = "1.6.4.dev8"

{modal-1.6.4.dev6 → modal-1.6.4.dev8}/pyproject.toml

@@ -43,6 +43,7 @@ oauth = [
 ]
 
 [dependency-groups]
+publish = ["pypi-attestations==0.0.30"]
 dev = [
     "fastapi~=0.125",
     "flaky~=3.8",