trainfabric 0.1.28 → 0.1.30

package/README.md

@@ -26,6 +26,8 @@ Secrets are stored in macOS Keychain when available. Other platforms use an encr
 
 ```bash
 trainfabric projects:list
+trainfabric projects:create --name <name>
+trainfabric projects:delete <projectId>
 trainfabric datasets:upload ./train.jsonl --project <projectId>
 trainfabric runs:quote --summary --project <projectId> --dataset <datasetId> --model llama-3-8b
 trainfabric runs:create --yes --quote <quoteId> --project <projectId> --dataset <datasetId> --model llama-3-8b

package/dist/index.cjs

@@ -8077,6 +8077,15 @@ var ResourceClient = class {
 };
 
 // ../sdk/dist/client/admin.js
+var apiKeyIdPattern = /^key_[A-Za-z0-9_-]+$/;
+var serviceAccountIdPattern = /^svc_[A-Za-z0-9_-]+$/;
+function normalizeRequiredId(value, pattern, label) {
+  const id = String(value ?? "").trim();
+  if (!pattern.test(id)) {
+    throw new Error(`${label} is invalid.`);
+  }
+  return encodeURIComponent(id);
+}
 var ApiKeysClient = class extends ResourceClient {
   create(input) {
     apiKeyCreateSchema.parse(input);
@@ -8086,7 +8095,7 @@ var ApiKeysClient = class extends ResourceClient {
     return this.requestGet("/v1/api-keys");
   }
   revoke(apiKeyId) {
-    return this.requestDelete(`/v1/api-keys/${apiKeyId}`);
+    return this.requestDelete(`/v1/api-keys/${normalizeRequiredId(apiKeyId, apiKeyIdPattern, "API key ID")}`);
   }
 };
 var ServiceAccountsClient = class extends ResourceClient {
@@ -8098,7 +8107,7 @@ var ServiceAccountsClient = class extends ResourceClient {
     return this.requestGet("/v1/service-accounts");
   }
   revoke(serviceAccountId) {
-    return this.requestDelete(`/v1/service-accounts/${serviceAccountId}`);
+    return this.requestDelete(`/v1/service-accounts/${normalizeRequiredId(serviceAccountId, serviceAccountIdPattern, "Service account ID")}`);
   }
 };
 
@@ -8164,6 +8173,14 @@ var ClusterClient = class extends ResourceClient {
 // ../sdk/dist/client/datasets.js
 var import_promises = __toESM(require("node:fs/promises"), 1);
 var import_node_path = __toESM(require("node:path"), 1);
+var datasetIdPattern = /^ds_[A-Za-z0-9_-]+$/;
+function encodeDatasetId(datasetId) {
+  const id = String(datasetId ?? "").trim();
+  if (!datasetIdPattern.test(id)) {
+    throw new Error("Dataset ID is invalid.");
+  }
+  return encodeURIComponent(id);
+}
 var DatasetsClient = class extends ResourceClient {
   async create(input) {
     const validation = await this.validate({
@@ -8178,7 +8195,7 @@ var DatasetsClient = class extends ResourceClient {
       throw new Error("projectId is required.");
     }
     const fileName = import_node_path.default.basename(input.path);
-    const fileBuffer = await import_promises.default.readFile(input.path);
+    const fileBuffer = await readDatasetFile(input.path);
     const uploadSessionInput = uploadSessionCreateSchema.parse({
       projectId,
       fileName,
@@ -8204,21 +8221,46 @@ var DatasetsClient = class extends ResourceClient {
     if (input.format !== "chat_jsonl") {
       throw new Error("Only chat_jsonl datasets are supported.");
     }
-    return validateChatJsonl(await import_promises.default.readFile(input.path, "utf8"));
+    return validateChatJsonl(await readDatasetFile(input.path, "utf8"));
   }
   get(datasetId) {
-    return this.requestGet(`/v1/datasets/${datasetId}`);
+    return this.requestGet(`/v1/datasets/${encodeDatasetId(datasetId)}`);
   }
   list(projectId) {
     const effectiveProjectId = projectId ?? this.parent.projectId;
-    return this.requestGet(`/v1/datasets${effectiveProjectId ? `?projectId=${effectiveProjectId}` : ""}`);
+    const params = new URLSearchParams();
+    if (effectiveProjectId) {
+      params.set("projectId", effectiveProjectId);
+    }
+    const query = params.toString();
+    return this.requestGet(`/v1/datasets${query ? `?${query}` : ""}`);
   }
   delete(datasetId) {
-    return this.requestDelete(`/v1/datasets/${datasetId}`);
+    return this.requestDelete(`/v1/datasets/${encodeDatasetId(datasetId)}`);
   }
 };
+async function readDatasetFile(pathname, encoding) {
+  let stats;
+  try {
+    stats = await import_promises.default.stat(pathname);
+  } catch {
+    throw new Error(`Dataset file not found: ${pathname}`);
+  }
+  if (!stats.isFile()) {
+    throw new Error(`Dataset path must be a file: ${pathname}`);
+  }
+  return encoding ? import_promises.default.readFile(pathname, encoding) : import_promises.default.readFile(pathname);
+}
 
 // ../sdk/dist/client/deployments.js
+var deploymentIdPattern = /^dep_[A-Za-z0-9_-]+$/;
+function encodeDeploymentId(deploymentId) {
+  const id = String(deploymentId ?? "").trim();
+  if (!deploymentIdPattern.test(id)) {
+    throw new Error("Deployment ID is invalid.");
+  }
+  return encodeURIComponent(id);
+}
 var DeploymentsClient = class extends ResourceClient {
   list() {
     return this.requestGet("/v1/deployments");
@@ -8227,23 +8269,31 @@ var DeploymentsClient = class extends ResourceClient {
     return this.requestPost("/v1/deployments", input);
   }
   get(id) {
-    return this.requestGet(`/v1/deployments/${id}`);
+    return this.requestGet(`/v1/deployments/${encodeDeploymentId(id)}`);
   }
   delete(id) {
-    return this.requestDelete(`/v1/deployments/${id}`);
+    return this.requestDelete(`/v1/deployments/${encodeDeploymentId(id)}`);
   }
 };
 
 // ../sdk/dist/client/models.js
+var modelIdPattern = /^mdl_[A-Za-z0-9_-]+$/;
+function normalizeModelId(modelId) {
+  const normalized = String(modelId ?? "").trim();
+  if (!modelIdPattern.test(normalized)) {
+    throw new Error("Model ID is invalid.");
+  }
+  return encodeURIComponent(normalized);
+}
 var ModelsClient = class extends ResourceClient {
   list() {
     return this.requestGet("/v1/models");
   }
   get(modelId) {
-    return this.requestGet(`/v1/models/${modelId}`);
+    return this.requestGet(`/v1/models/${normalizeModelId(modelId)}`);
   }
   export(modelId) {
-    return this.requestPost(`/v1/models/${modelId}/export`);
+    return this.requestPost(`/v1/models/${normalizeModelId(modelId)}/export`);
   }
 };
 
@@ -8255,12 +8305,20 @@ var ProjectsClient = class extends ResourceClient {
       organizationId: input.organizationId ?? this.parent.orgId
     });
   }
+  delete(projectId) {
+    return this.requestDelete(`/v1/projects/${projectId}`);
+  }
   get(projectId) {
     return this.requestGet(`/v1/projects/${projectId}`);
   }
   list(organizationId) {
     const suffix = organizationId ?? this.parent.orgId;
-    return this.requestGet(`/v1/projects${suffix ? `?organizationId=${suffix}` : ""}`);
+    const params = new URLSearchParams();
+    if (suffix) {
+      params.set("organizationId", suffix);
+    }
+    const query = params.toString();
+    return this.requestGet(`/v1/projects${query ? `?${query}` : ""}`);
   }
 };
 var OrganizationsClient = class extends ResourceClient {
@@ -8514,6 +8572,14 @@ var RunHandle = class {
 };
 
 // ../sdk/dist/client/runs.js
+var runIdPattern = /^run_[A-Za-z0-9_-]+$/;
+function encodeRunId(runId) {
+  const id = String(runId ?? "").trim();
+  if (!runIdPattern.test(id)) {
+    throw new Error("Run ID is invalid.");
+  }
+  return encodeURIComponent(id);
+}
 var RunsClient = class extends ResourceClient {
   describeEmptyQuoteFailure(input) {
     const compute = input.compute && input.compute !== "auto" && input.compute !== "cpu-sim" ? input.compute : void 0;
@@ -8616,42 +8682,47 @@ var RunsClient = class extends ResourceClient {
     return new RunHandle(this.parent, run);
   }
   get(runId) {
-    return this.requestGet(`/v1/runs/${runId}`);
+    return this.requestGet(`/v1/runs/${encodeRunId(runId)}`);
   }
   list(projectId) {
     const effectiveProjectId = projectId ?? this.parent.projectId;
-    return this.requestGet(`/v1/runs${effectiveProjectId ? `?projectId=${effectiveProjectId}` : ""}`);
+    const params = new URLSearchParams();
+    if (effectiveProjectId) {
+      params.set("projectId", effectiveProjectId);
+    }
+    const query = params.toString();
+    return this.requestGet(`/v1/runs${query ? `?${query}` : ""}`);
   }
   cancel(runId) {
-    return this.requestPost(`/v1/runs/${runId}/cancel`);
+    return this.requestPost(`/v1/runs/${encodeRunId(runId)}/cancel`);
   }
   resume(runId) {
-    return this.requestPost(`/v1/runs/${runId}/resume`);
+    return this.requestPost(`/v1/runs/${encodeRunId(runId)}/resume`);
   }
   terminate(runId) {
-    return this.requestPost(`/v1/runs/${runId}/terminate`);
+    return this.requestPost(`/v1/runs/${encodeRunId(runId)}/terminate`);
   }
   logs(runId) {
-    return this.requestGet(`/v1/runs/${runId}/logs`);
+    return this.requestGet(`/v1/runs/${encodeRunId(runId)}/logs`);
   }
   async watch(runId) {
     const detail = await this.get(runId);
     return new RunHandle(this.parent, detail.run);
   }
   allocation(runId) {
-    return this.requestGet(`/v1/runs/${runId}/allocation`);
+    return this.requestGet(`/v1/runs/${encodeRunId(runId)}/allocation`);
   }
   usage(runId) {
-    return this.requestGet(`/v1/runs/${runId}/usage`);
+    return this.requestGet(`/v1/runs/${encodeRunId(runId)}/usage`);
   }
   costBreakdown(runId) {
-    return this.requestGet(`/v1/runs/${runId}/cost-breakdown`);
+    return this.requestGet(`/v1/runs/${encodeRunId(runId)}/cost-breakdown`);
   }
   configuration(runId) {
-    return this.requestGet(`/v1/runs/${runId}/configuration`);
+    return this.requestGet(`/v1/runs/${encodeRunId(runId)}/configuration`);
   }
   explanation(runId) {
-    return this.requestGet(`/v1/runs/${runId}/explanation`);
+    return this.requestGet(`/v1/runs/${encodeRunId(runId)}/explanation`);
   }
   async wait(runId, options) {
     const handle = await this.watch(runId);
@@ -8823,6 +8894,7 @@ var idPatterns = {
   apiKey: /^key_[A-Za-z0-9_-]+$/,
   dataset: /^ds_[A-Za-z0-9_-]+$/,
   deployment: /^dep_[A-Za-z0-9_-]+$/,
+  detection: /^det_[A-Za-z0-9_-]+$/,
   model: /^mdl_[A-Za-z0-9_-]+$/,
   org: /^org_[A-Za-z0-9_-]+$/,
   pool: /^pool_[A-Za-z0-9_-]+$/,
@@ -8919,7 +8991,12 @@ function validateRepoPath(repoPath) {
   if (absolute === parsed.root || absolute === import_node_os.default.homedir()) {
     throw new Error(`Refusing to package unsafe repository path: ${repoPath}`);
   }
-  const stat = import_node_fs.default.statSync(absolute);
+  let stat;
+  try {
+    stat = import_node_fs.default.statSync(absolute);
+  } catch {
+    throw new Error(`Repository path not found: ${repoPath}`);
+  }
   if (!stat.isDirectory()) {
     throw new Error(`Repository path must be a directory: ${repoPath}`);
   }
@@ -9133,7 +9210,7 @@ function buildComputeSpec(options) {
 
 // src/index.ts
 var DEFAULT_TRAINFABRIC_API_URL2 = "https://api.trainfabric.com";
-var CLI_VERSION = "0.1.28";
+var CLI_VERSION = "0.1.30";
 var CONFIG_DIR = import_node_path3.default.join(import_node_os2.default.homedir(), ".trainfabric");
 var CONFIG_PATH = import_node_path3.default.join(CONFIG_DIR, "config.json");
 var FALLBACK_SECRET_PATH = import_node_path3.default.join(CONFIG_DIR, "session.enc");
@@ -9755,6 +9832,11 @@ program2.command("projects:create").requiredOption("--name <name>").option("--or
     })
   );
 });
+program2.command("projects:delete").argument("<projectId>").description("Delete an empty project").action(async (projectId) => {
+  const normalizedProjectId = normalizeId(projectId, "project", "Project ID");
+  await createClient(loadConfig()).projects.delete(normalizedProjectId);
+  printJson({ deleted: true, id: normalizedProjectId });
+});
 program2.command("datasets:validate").argument("<file>").description("Validate a local dataset file").action(async (file) => {
   assertReadableFile(file, "Dataset path");
   const validation = await createClient(loadConfig()).datasets.validate({
@@ -9806,10 +9888,23 @@ program2.command("runtime:detect").option("--project <projectId>").option("--rep
     throw new Error("Provide --repo or --git.");
   }
   const config = loadConfig();
-  const detection = await createClient(config).runtime.detect({
-    projectId: requireProjectId(options, config),
-    source: sourceOptions.source
-  });
+  let detection;
+  try {
+    detection = await createClient(config).runtime.detect({
+      projectId: requireProjectId(options, config),
+      source: sourceOptions.source
+    });
+  } catch (error) {
+    if (sourceOptions.source.kind === "git" && error instanceof Error && /Request failed with status 404/.test(error.message)) {
+      throw new Error("Git repository could not be resolved. Check the repository URL, branch, and access permissions.");
+    }
+    throw error;
+  }
+  if (sourceOptions.source.kind === "git" && detection.status !== "detected") {
+    throw new Error(
+      `Runtime source is ${detection.status}. Git repository could not be resolved into a supported runtime source.`
+    );
+  }
   printJson(redactInlineSource(detection));
 });
 program2.command("runtime:build").option("--project <projectId>").requiredOption("--detection <detectionId>").description("Build or reuse a cached runtime image from a runtime detection").action(async (options) => {
@@ -9817,7 +9912,7 @@ program2.command("runtime:build").option("--project <projectId>").requiredOption
   printJson(
     await createClient(config).runtime.build({
       projectId: requireProjectId(options, config),
-      detectionId: options.detection
+      detectionId: normalizeId(options.detection, "detection", "Runtime detection ID")
     })
   );
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trainfabric",
-  "version": "0.1.28",
+  "version": "0.1.30",
   "description": "Trainfabric CLI for launching GPU training jobs on the hosted Trainfabric backend.",
   "type": "module",
   "main": "dist/index.cjs",