trainfabric 0.1.31 → 0.1.32

package/dist/index.cjs

@@ -8923,7 +8923,17 @@ function collectRuntimeFiles(repoPath) {
     if (found.length >= maxFiles) {
       return;
     }
-    for (const entry of import_node_fs.default.readdirSync(currentPath, { withFileTypes: true })) {
+    let entries;
+    try {
+      entries = import_node_fs.default.readdirSync(currentPath, { withFileTypes: true });
+    } catch (error) {
+      if (error.code === "EACCES" || error.code === "EPERM") {
+        const relativePath = import_node_path2.default.relative(repoPath, currentPath) || ".";
+        throw new Error(`Permission denied while scanning repository path: ${relativePath}`);
+      }
+      throw new Error(`Failed to scan repository path: ${currentPath}`);
+    }
+    for (const entry of entries) {
       const absolute = import_node_path2.default.join(currentPath, entry.name);
       const relative = import_node_path2.default.relative(repoPath, absolute).split(import_node_path2.default.sep).join("/");
       if (entry.isDirectory()) {
@@ -8935,13 +8945,30 @@ function collectRuntimeFiles(repoPath) {
       if (!entry.isFile() || !shouldIncludeFile(entry.name)) {
         continue;
       }
-      const stat = import_node_fs.default.statSync(absolute);
+      let stat;
+      try {
+        stat = import_node_fs.default.statSync(absolute);
+      } catch (error) {
+        if (error.code === "EACCES" || error.code === "EPERM") {
+          throw new Error(`Permission denied while scanning repository file: ${relative}`);
+        }
+        throw new Error(`Failed to inspect repository file: ${relative}`);
+      }
       if (stat.size > maxFileBytes) {
         continue;
       }
+      let content;
+      try {
+        content = import_node_fs.default.readFileSync(absolute, "utf8");
+      } catch (error) {
+        if (error.code === "EACCES" || error.code === "EPERM") {
+          throw new Error(`Permission denied while reading repository file: ${relative}`);
+        }
+        throw new Error(`Failed to read repository file: ${relative}`);
+      }
       found.push({
         path: relative,
-        content: import_node_fs.default.readFileSync(absolute, "utf8")
+        content
       });
     }
   }
@@ -8985,7 +9012,22 @@ function validateGitBranch(value) {
 function validateRepoPath(repoPath) {
   const absolute = import_node_path2.default.resolve(repoPath);
   const parsed = import_node_path2.default.parse(absolute);
-  if (absolute === parsed.root || absolute === import_node_os.default.homedir()) {
+  const unsafeRoots = /* @__PURE__ */ new Set([
+    parsed.root,
+    import_node_os.default.homedir(),
+    import_node_path2.default.resolve(import_node_os.default.tmpdir()),
+    import_node_path2.default.resolve("/tmp"),
+    import_node_path2.default.resolve("/private/tmp"),
+    import_node_path2.default.resolve("/var"),
+    import_node_path2.default.resolve("/Users"),
+    import_node_path2.default.resolve("/System"),
+    import_node_path2.default.resolve("/Library"),
+    import_node_path2.default.resolve("/Applications"),
+    import_node_path2.default.resolve("/etc"),
+    import_node_path2.default.resolve("/bin"),
+    import_node_path2.default.resolve("/usr")
+  ]);
+  if (unsafeRoots.has(absolute)) {
     throw new Error(`Refusing to package unsafe repository path: ${repoPath}`);
   }
   let stat;
@@ -9207,7 +9249,7 @@ function buildComputeSpec(options) {
 
 // src/index.ts
 var DEFAULT_TRAINFABRIC_API_URL2 = "https://api.trainfabric.com";
-var CLI_VERSION = "0.1.31";
+var CLI_VERSION = "0.1.32";
 var CONFIG_DIR = import_node_path3.default.join(import_node_os2.default.homedir(), ".trainfabric");
 var CONFIG_PATH = import_node_path3.default.join(CONFIG_DIR, "config.json");
 var FALLBACK_SECRET_PATH = import_node_path3.default.join(CONFIG_DIR, "session.enc");
@@ -9731,14 +9773,15 @@ function normalizeHttpBaseUrl(value) {
   try {
     url = new URL(value);
   } catch {
-    throw new Error(`Invalid base URL "${value}". Use an absolute http(s) URL such as https://api.trainfabric.com.`);
+    throw new Error(`Invalid base URL "${value}". Use an absolute HTTPS origin such as https://api.trainfabric.com.`);
+  }
+  const isLocalDevHost = url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "::1";
+  if (url.protocol !== "https:" && !(isLocalDevHost && url.protocol === "http:")) {
+    throw new Error(`Invalid base URL "${value}". Use HTTPS, or http://localhost for local development.`);
   }
-  if (url.protocol !== "https:" && url.protocol !== "http:") {
-    throw new Error(`Invalid base URL "${value}". Use an absolute http(s) URL such as https://api.trainfabric.com.`);
+  if (url.pathname !== "/" || url.search || url.hash) {
+    throw new Error(`Invalid base URL "${value}". Use the API origin without a path, query, or hash.`);
   }
-  url.pathname = url.pathname.replace(/\/+$/, "");
-  url.search = "";
-  url.hash = "";
   return url.toString().replace(/\/+$/, "");
 }
 async function login(config) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trainfabric",
-  "version": "0.1.31",
+  "version": "0.1.32",
   "description": "Trainfabric CLI for launching GPU training jobs on the hosted Trainfabric backend.",
   "type": "module",
   "main": "dist/index.cjs",