version: "1.0.1" name: modal-vllm description: Serve a model via vLLM on Modal as an HTTPS endpoint with strict leave-no-trace lifecycle. Use when an experiment needs to query an LLM as a remote API (chat completions, generation) rather than running it locally. tags:

• compute-backend
• serving
• modal
• vllm
• inference
• gpu

modal-vllm

Cloud vLLM serving via Modal, wired into NeuriCo's reproducibility and cleanup model.

When to use

Use this skill when your experiment needs to:

• Query a model >7B as an HTTPS endpoint (OpenAI-compatible API via vLLM)
• Run synthetic data generation, distillation, or judging against a deployed model
• Test a fine-tuned LoRA adapter via the API (vLLM hot-loads adapters)

Do not use this skill if:

• You're training a model (use modal-training instead)
• You only need a single one-shot inference call (modal run against modal-training eval template is cheaper)
• You're querying a model already hosted elsewhere (OpenAI, Anthropic, etc. — use their native client)

Contract (read first)

Same three rules as modal-training, with two serving-specific additions:

1. Ephemeral compute, persistent workspace. All Modal-side state lives inside a per-experiment environment named neurico-<EXP_ID>.
2. Pull before teardown. lifecycle.pull_all() must succeed before teardown() runs.
3. Use the scaffolder. scripts/new_modal_app.py.

Plus:

1. Deployed apps must be explicitly stopped. Unlike modal run, modal deploy creates persistent apps. The vLLM lifecycle calls modal app stop before deleting the environment. The scaffolder bakes this into every generated template.
2. Endpoint credentials live in the workspace, never in code. Proxy-auth tokens (MODAL_KEY, MODAL_SECRET) are written to .neurico/modal_endpoint.json at deploy time and read by the experiment code. They are destroyed at teardown with the rest of the environment.

Prerequisites

One-time setup on your HOST machine (not inside the container)

modal token new      # opens browser, authenticates, writes ~/.modal.toml

Inside the neurico Docker container, ~/.modal.toml is mounted read-only from your host (same pattern as Claude / Codex / Gemini credentials), so modal is authenticated automatically on every run. Do not run modal token new inside the container — no browser exists there.

Optional: Hugging Face token (only for gated models)

Add HF_TOKEN=hf_xxx to neurico/.env if your serving target uses gated models or private repos. The lifecycle handles per-environment provisioning and cleanup. Public models need nothing — pass --no-hf-secret to the scaffolder to drop the HF entry.

Additional secrets

The scaffolder accepts repeated --secret NAME=ENV_VAR[,ENV_VAR2] flags for any other Modal secrets the served model needs (e.g. a private weights host). The lifecycle mints them per-env and cleans them up at teardown.

Proxy auth tokens (per deploy, one-time per endpoint)

vLLM endpoints use proxy auth. Mint a token pair in the Modal dashboard:

Modal dashboard -> Settings -> Proxy Auth Tokens -> Create

Pass the values to the capture-endpoint step once after modal deploy; the lifecycle stores them in .neurico/modal_endpoint.json for experiment code to read, and clears them at teardown. You do not put them in any .env file.

Verify

python .claude/skills/modal-vllm/scripts/check_modal_setup.py
# --probe creates+stops a tiny test deploy, ~10sec, no GPU
# --json for machine-readable output

Quickstart

1. Generate a serving deployment

python .claude/skills/modal-vllm/scripts/new_modal_app.py vllm-serve \
    --exp-id "$(basename $(pwd))" \
    --base-model "Qwen/Qwen2.5-7B-Instruct" \
    --lora-repo "user/my-adapter"     # optional
    --out src/modal_serve.py

--lora-repo takes a HuggingFace Hub repo id. If the adapter was trained via modal-training, push artifacts/final/ to HF Hub first (e.g. huggingface-cli upload <user>/<repo> artifacts/final) and pass that repo here. vLLM hot-loads adapters at startup; there's no Modal-side handoff between the training and serving skills.

2. Deploy it

modal deploy --env=neurico-<EXP_ID> src/modal_serve.py

Modal prints a URL. Then mint a proxy-auth token pair from the Modal dashboard (Settings → Proxy Auth Tokens → Create) and pass it to the generated script's capture-endpoint subcommand — the template writes the URL + tokens into .neurico/modal_endpoint.json so experiment code can read them:

MODAL_KEY=wk-... MODAL_SECRET=ws-... \
    python src/modal_serve.py capture-endpoint

3. Use it in experiment code

import json, os
ep = json.loads(open(".neurico/modal_endpoint.json").read())
# ep = {"url": "https://...modal.run", "key": "wk-...", "secret": "ws-..."}
# Use as OpenAI-compatible base URL with proxy-auth headers

4. Pull artifacts + stop + sweep when done

# 1. Snapshot endpoint provenance (writes redacted artifacts/vllm_endpoint.json,
#    marks pull_complete=True in the sentinel — required before teardown).
python .claude/skills/modal-vllm/scripts/lifecycle.py pull     --exp-id <EXP_ID>
 
# 2. Tear the env down (modal app stop -> modal environment delete -y ->
#    clears the live .neurico/modal_endpoint.json).
python .claude/skills/modal-vllm/scripts/lifecycle.py teardown --exp-id <EXP_ID>

If you forget the pull step, teardown self-heals: it notices the endpoint was captured but pull_complete is still false and runs pull_all() for you before deleting the env. The redacted copy at artifacts/vllm_endpoint.json is kept for provenance regardless.

Decision tree

vLLM's --enable-lora hot-loads adapters at startup. The template handles base-only and base+adapter via the same flags; pass --lora-repo "" to serve bare base.

Files in this skill

• scripts/new_modal_app.py — scaffolder
• scripts/lifecycle.py — register / capture_endpoint / pull_all / teardown
• scripts/check_modal_setup.py — doctor (thin wrapper around shared checks)
• scripts/templates/modal_vllm_serve.py.tmpl — parameterized vLLM serve app
• references/vllm_serve_recipe.md — vLLM flags, GPU sizing, LoRA hot-load
• references/lifecycle.md — pull/teardown contract for deployed apps

Anti-patterns

Reproducibility guarantee

After teardown, the workspace contains artifacts/vllm_endpoint.json with:

• Base model name + revision
• LoRA repo + revision (if any)
• vLLM version + flags (max_model_len, GPU type, etc.)
• Served model names (so a redeploy honors the same identifier)
• Original endpoint URL pattern (for log cross-reference; the URL itself is no longer valid post-teardown)

This is enough to redeploy a bit-identical endpoint later if the experiment needs to be reproduced.

Pipeline integration

Same as modal-training: the orchestrator's _modal_sweep_if_used reads .neurico/modal_resources.json and ensures the env is destroyed at workspace teardown. The vLLM lifecycle additionally records app names in the sentinel so modal app stop runs first.