synth-ai 0.2.9.dev11__py3-none-any.whl → 0.4.1__py3-none-any.whl

synth_ai/cli/lib/task_app_env.py

@@ -0,0 +1,295 @@
+import os
+import re
+from pathlib import Path
+from typing import Dict
+
+import click
+
+from synth_ai.core.env import PROD_BASE_URL_DEFAULT
+from synth_ai.core.process import ensure_local_port_available
+from synth_ai.core.task_app_state import persist_env_api_key
+from synth_ai.core.user_config import load_user_env, update_user_config
+
+from .env import mask_str, resolve_env_var
+
+__all__ = [
+    "ensure_env_credentials",
+    "ensure_port_free",
+    "preflight_env_key",
+    "interactive_fill_env",
+    "save_to_env_file",
+]
+
+_ENV_LINE = re.compile(r"^\s*(?:export\s+)?(?P<key>[A-Za-z0-9_]+)\s*=\s*(?P<value>.*)$")
+
+
+def ensure_env_credentials(*, require_synth: bool = False, prompt: bool = True) -> None:
+    """Ensure required API keys are present in the process environment."""
+
+    load_user_env(override=False)
+
+    env_key = (os.environ.get("ENVIRONMENT_API_KEY") or "").strip()
+    if prompt and not env_key:
+        resolve_env_var("ENVIRONMENT_API_KEY")
+        env_key = (os.environ.get("ENVIRONMENT_API_KEY") or "").strip()
+
+    if env_key:
+        update_user_config(
+            {
+                "ENVIRONMENT_API_KEY": env_key,
+                "DEV_ENVIRONMENT_API_KEY": env_key,
+            }
+        )
+        persist_env_api_key(env_key)
+    elif prompt:
+        raise click.ClickException("ENVIRONMENT_API_KEY is required.")
+
+    synth_key = (os.environ.get("SYNTH_API_KEY") or "").strip()
+    if prompt and (require_synth or not synth_key):
+        resolve_env_var("SYNTH_API_KEY")
+        synth_key = (os.environ.get("SYNTH_API_KEY") or "").strip()
+
+    if synth_key:
+        update_user_config({"SYNTH_API_KEY": synth_key})
+    elif require_synth and prompt:
+        raise click.ClickException("SYNTH_API_KEY is required.")
+
+
+def ensure_port_free(port: int, host: str, *, force: bool) -> None:
+    """Ensure a TCP port is not in use, optionally killing processes when ``force`` is True."""
+
+    if ensure_local_port_available(host, port, force=force):
+        return
+
+    message = f"Port {port} is still in use. Stop the running server and try again."
+    if force:
+        raise click.ClickException(message)
+    raise click.ClickException(f"Port {port} appears to be in use. Restart with --force to terminate it.")
+
+
+def preflight_env_key(*, crash_on_failure: bool = False) -> None:
+    """Ensure ENVIRONMENT_API_KEY exists and attempt a backend registration."""
+
+    ensure_env_credentials(require_synth=False, prompt=not crash_on_failure)
+    load_user_env(override=False)
+
+    raw_backend = (
+        os.environ.get("BACKEND_BASE_URL")
+        or os.environ.get("SYNTH_BASE_URL")
+        or f"{PROD_BASE_URL_DEFAULT}/api"
+    )
+    backend_base = raw_backend.rstrip("/")
+    if not backend_base.endswith("/api"):
+        backend_base += "/api"
+
+    synth_key = os.environ.get("SYNTH_API_KEY") or ""
+    env_api_key = (os.environ.get("ENVIRONMENT_API_KEY") or "").strip()
+
+    def _mint_key() -> str | None:
+        try:
+            from synth_ai.sdk.learning.rl.secrets import mint_environment_api_key
+
+            key = mint_environment_api_key()
+            os.environ["ENVIRONMENT_API_KEY"] = key
+            os.environ.setdefault("DEV_ENVIRONMENT_API_KEY", key)
+            update_user_config(
+                {
+                    "ENVIRONMENT_API_KEY": key,
+                    "DEV_ENVIRONMENT_API_KEY": key,
+                }
+            )
+            persist_env_api_key(key)
+            click.echo(f"[preflight] minted ENVIRONMENT_API_KEY ({mask_str(key)})")
+            return key
+        except Exception as exc:  # pragma: no cover - defensive fallback
+            if crash_on_failure:
+                raise click.ClickException(
+                    f"[CRITICAL] Failed to mint ENVIRONMENT_API_KEY: {exc}"
+                ) from exc
+            click.echo(
+                f"[WARN] Failed to mint ENVIRONMENT_API_KEY automatically ({exc}); proceeding without upload"
+            )
+            return None
+
+    minted = False
+    if not env_api_key:
+        env_api_key = _mint_key() or ""
+        minted = bool(env_api_key)
+
+    if not env_api_key:
+        if crash_on_failure:
+            raise click.ClickException(
+                "[CRITICAL] ENVIRONMENT_API_KEY missing; run `synth-ai setup` to configure it."
+            )
+        click.echo("[preflight] ENVIRONMENT_API_KEY missing; continuing without verification.")
+        return
+
+    if minted:
+        persist_env_api_key(env_api_key)
+
+    if not synth_key.strip():
+        click.echo("[preflight] SYNTH_API_KEY not set; skipping backend preflight.")
+        return
+
+    try:
+        import base64
+
+        import httpx
+        from nacl.public import PublicKey, SealedBox
+    except Exception:  # pragma: no cover - optional deps
+        click.echo("[preflight] Optional crypto dependencies missing; skipping upload.")
+        return
+
+    try:
+        with httpx.Client(timeout=15.0, headers={"Authorization": f"Bearer {synth_key}"}) as client:
+            click.echo(f"[preflight] backend={backend_base}")
+            click.echo("[preflight] fetching public key…")
+            rpk = client.get(f"{backend_base.rstrip('/')}/v1/crypto/public-key")
+            if rpk.status_code != 200:
+                click.echo(f"[preflight] public key fetch failed with {rpk.status_code}; skipping upload")
+                return
+            pk = (rpk.json() or {}).get("public_key")
+            if not pk:
+                click.echo("[preflight] no public key returned; skipping upload")
+                return
+
+            pk_bytes = base64.b64decode(pk, validate=True)
+            sealed_box = SealedBox(PublicKey(pk_bytes))
+            ciphertext = sealed_box.encrypt(env_api_key.encode("utf-8"))
+            ct_b64 = base64.b64encode(ciphertext).decode()
+            payload = {"name": "ENVIRONMENT_API_KEY", "ciphertext_b64": ct_b64}
+
+            click.echo(f"[preflight] posting to {backend_base.rstrip('/')}/v1/env-keys")
+            response = client.post(f"{backend_base.rstrip('/')}/v1/env-keys", json=payload)
+            if 200 <= response.status_code < 300:
+                click.echo(
+                    f"✅ ENVIRONMENT_API_KEY uploaded successfully ({mask_str(env_api_key)})"
+                )
+                try:
+                    ver = client.get(f"{backend_base.rstrip('/')}/v1/env-keys/verify")
+                    if ver.status_code == 200 and (ver.json() or {}).get("present"):
+                        click.echo("✅ Key verified in backend")
+                    else:
+                        click.echo(
+                            f"⚠️  Verification returned {ver.status_code}, but upload succeeded - proceeding"
+                        )
+                except Exception as verify_err:  # pragma: no cover - verification optional
+                    click.echo(
+                        f"⚠️  Verification check failed ({verify_err}), but upload succeeded - proceeding"
+                    )
+                return
+
+            snippet = response.text[:400] if response.text else ""
+            message = (
+                f"ENVIRONMENT_API_KEY upload failed with status {response.status_code}"
+                + (f" body={snippet}" if snippet else "")
+            )
+            if crash_on_failure:
+                raise click.ClickException(f"[CRITICAL] {message}")
+            click.echo(f"[WARN] {message}; proceeding anyway")
+    except Exception as exc:  # pragma: no cover - network failures
+        message = f"Backend preflight for ENVIRONMENT_API_KEY failed: {exc}"
+        if crash_on_failure:
+            raise click.ClickException(f"[CRITICAL] {message}") from exc
+        click.echo(f"[WARN] {message}; proceeding anyway")
+
+
+def _parse_env_file(path: Path) -> dict[str, str]:
+    data: dict[str, str] = {}
+    try:
+        for line in path.read_text(encoding="utf-8").splitlines():
+            if not line or line.lstrip().startswith("#") or "=" not in line:
+                continue
+            key, value = line.split("=", 1)
+            data[key.strip()] = value.strip()
+    except FileNotFoundError:
+        pass
+    return data
+
+
+def _merge_env_content(original: str, updates: Dict[str, str]) -> str:
+    """Merge env updates into existing content while preserving comments/spacing."""
+    lines = original.splitlines(keepends=True)
+    seen: set[str] = set()
+    newline_default = "\n"
+    if lines and lines[-1].endswith("\r\n"):
+        newline_default = "\r\n"
+
+    merged: list[str] = []
+    for line in lines:
+        stripped = line.rstrip("\r\n")
+        m = _ENV_LINE.match(stripped)
+        key = m.group("key") if m else None
+        if key and key in updates and key not in seen:
+            end = "\r\n" if line.endswith("\r\n") else "\n"
+            merged.append(f"{key}={updates[key]}{end}")
+            seen.add(key)
+        else:
+            merged.append(line)
+
+    for key, val in updates.items():
+        if key not in seen:
+            merged.append(f"{key}={val}{newline_default}")
+
+    if merged and not merged[-1].endswith(("\n", "\r\n")):
+        merged[-1] = merged[-1] + newline_default
+
+    return "".join(merged)
+
+
+def save_to_env_file(env_path: Path, key: str, value: str) -> Path:
+    """Update a single key in .env preserving comments/formatting."""
+    existing = env_path.read_text(encoding="utf-8", errors="ignore") if env_path.exists() else ""
+    merged = _merge_env_content(existing, {key: value})
+    env_path.parent.mkdir(parents=True, exist_ok=True)
+    env_path.write_text(merged, encoding="utf-8")
+    return env_path
+
+
+def interactive_fill_env(env_path: Path) -> Path | None:
+    """Fill ENVIRONMENT_API_KEY/SYNTH_API_KEY/OPENAI_API_KEY while preserving file content."""
+    existing = _parse_env_file(env_path) if env_path.exists() else {}
+
+    def _prompt(label: str, *, default: str = "", required: bool) -> str | None:
+        while True:
+            try:
+                value = click.prompt(
+                    label, default=default, show_default=bool(default) or not required
+                ).strip()
+            except (click.Abort, EOFError, KeyboardInterrupt):  # pragma: no cover - interactive paths
+                click.echo("Aborted env creation.")
+                return None
+            if value or not required:
+                return value
+            click.echo("This field is required.")
+
+    # Allow non-interactive tests to run; skip TTY enforcement.
+    env_api_key = _prompt(
+        "ENVIRONMENT_API_KEY",
+        default=existing.get("ENVIRONMENT_API_KEY", ""),
+        required=True,
+    )
+    if env_api_key is None:
+        return None
+    synth_key = _prompt(
+        "SYNTH_API_KEY (optional)",
+        default=existing.get("SYNTH_API_KEY", ""),
+        required=False,
+    ) or ""
+    openai_key = _prompt(
+        "OPENAI_API_KEY (optional)",
+        default=existing.get("OPENAI_API_KEY", ""),
+        required=False,
+    ) or ""
+
+    updates = {
+        "ENVIRONMENT_API_KEY": env_api_key,
+        "SYNTH_API_KEY": synth_key,
+        "OPENAI_API_KEY": openai_key,
+    }
+
+    content = env_path.read_text(encoding="utf-8", errors="ignore") if env_path.exists() else ""
+    merged = _merge_env_content(content, updates)
+    env_path.parent.mkdir(parents=True, exist_ok=True)
+    env_path.write_text(merged, encoding="utf-8")
+    return env_path

synth_ai/cli/lib/train_cfgs.py

@@ -0,0 +1,300 @@
+import tomllib
+from datetime import datetime
+from pathlib import Path
+from typing import Any, Dict, List, Literal, Tuple
+
+from synth_ai.cli.lib.prompts import ctx_print
+from synth_ai.core.paths import is_hidden_path, validate_file_type
+
+# Train config types: prompt optimization, reinforcement learning, supervised fine-tuning, ADAS, context learning
+TrainType = Literal["prompt", "rl", "sft", "adas", "context_learning"]
+
+
+def get_type(config: Dict[str, Any]) -> TrainType | None:
+    if "context_learning" in config:
+        return "context_learning"
+
+    if "prompt_learning" in config:
+        return "prompt"
+
+    # Graph / ADAS jobs use a dedicated [graph] (or [adas]) section.
+    if isinstance(config.get("graph"), dict) or isinstance(config.get("adas"), dict):
+        return "adas"
+
+    algorithm = config.get("algorithm")
+    algo_type = None
+    algo_method = None
+    if isinstance(algorithm, dict):
+        algo_type = str(algorithm.get("type") or "").lower()
+        algo_method = str(algorithm.get("method") or "").lower()
+
+    job = config.get("job")
+    compute = config.get("compute")
+    rollout = config.get("rollout")
+    policy = config.get("policy")
+    model = config.get("model")
+
+    if algo_type == "online" or algo_method in {"policy_gradient", "ppo", "gspo"}:
+        return "rl"
+    if rollout and (policy or model):
+        return "rl"
+
+    if algo_type == "offline" or algo_method in {"sft", "supervised_finetune"}:
+        return "sft"
+    if job and compute:
+        return "sft"
+
+    return None
+
+
+def validate_context_learning_cfg(cfg: Dict[str, Any]) -> None:
+    section = cfg.get("context_learning")
+    if not isinstance(section, dict):
+        raise ValueError("[context_learning] section must be a dict")
+
+    task_app_url = section.get("task_app_url") or section.get("task_url")
+    if not task_app_url:
+        raise ValueError("[context_learning].task_app_url is required")
+
+    evaluation_seeds = section.get("evaluation_seeds")
+    if evaluation_seeds is not None and not isinstance(evaluation_seeds, list):
+        raise ValueError("[context_learning].evaluation_seeds must be a list when provided")
+
+    env_section = section.get("environment")
+    if env_section is not None and not isinstance(env_section, dict):
+        raise ValueError("[context_learning].environment must be a dict when provided")
+
+    algorithm_section = section.get("algorithm")
+    if algorithm_section is not None and not isinstance(algorithm_section, dict):
+        raise ValueError("[context_learning].algorithm must be a dict when provided")
+
+    metadata = section.get("metadata")
+    if metadata is not None and not isinstance(metadata, dict):
+        raise ValueError("[context_learning].metadata must be a dict when provided")
+
+    return None
+
+
+def validate_po_cfg(cfg: Dict[str, Any]) -> None:
+    pl_cfg = cfg.get("prompt_learning")
+    if not pl_cfg:
+        pl_cfg = cfg
+
+    if not isinstance(pl_cfg, dict):
+        raise ValueError("[prompt_learning] section must be a dict")
+
+    algorithm = pl_cfg.get("algorithm")
+    if not algorithm:
+        raise ValueError("[prompt_learning].algorithm is required")
+
+    if algorithm not in {"mipro", "gepa"}:
+        raise ValueError("[prompt_learning].algorithm must be 'mipro' or 'gepa'")
+
+    if not pl_cfg.get("task_app_url"):
+        raise ValueError("[prompt_learning].task_app_url is required")
+
+    if algorithm == "mipro":
+        mipro = pl_cfg.get("mipro")
+        if not isinstance(mipro, dict):
+            raise ValueError("[prompt_learning].mipro section is required when algorithm is 'mipro'")
+    elif algorithm == "gepa":
+        gepa = pl_cfg.get("gepa")
+        if not isinstance(gepa, dict):
+            raise ValueError("[prompt_learning].gepa section is required when algorithm is 'gepa'")
+
+    policy = pl_cfg.get("policy")
+    if policy is not None:
+        if not isinstance(policy, dict):
+            raise ValueError("[prompt_learning].policy must be a dict")
+        if not policy.get("model"):
+            raise ValueError("[prompt_learning].policy.model is required")
+        if not policy.get("provider"):
+            raise ValueError("[prompt_learning].policy.provider is required")
+
+    return None
+
+
+def validate_sft_cfg(cfg: Dict[str, Any]) -> None:
+    algorithm = cfg.get("algorithm")
+    if not isinstance(algorithm, dict):
+        raise ValueError("[algorithm] section is required")
+    if algorithm.get("type") != "offline":
+        raise ValueError("[algorithm].type must be 'offline'")
+    method = algorithm.get("method")
+    if method and method not in {"sft", "supervised_finetune"}:
+        raise ValueError("[algorithm].method must be 'sft' or 'supervised_finetune'")
+    if not algorithm.get("variety"):
+        raise ValueError("[algorithm].variety is required")
+
+    job = cfg.get("job")
+    if not isinstance(job, dict):
+        raise ValueError("[job] section is required")
+    if not job.get("model"):
+        raise ValueError("[job].model is required")
+    if not (job.get("data") or job.get("data_path")):
+        raise ValueError("[job].data or [job].data_path is required")
+
+    compute = cfg.get("compute")
+    if not isinstance(compute, dict):
+        raise ValueError("[compute] section is required")
+    if not compute.get("gpu_type"):
+        raise ValueError("[compute].gpu_type is required")
+    if not compute.get("gpu_count"):
+        raise ValueError("[compute].gpu_count is required")
+
+    return None
+
+
+def validate_rl_cfg(cfg: Dict[str, Any]) -> None:
+    algorithm = cfg.get("algorithm")
+    if not isinstance(algorithm, dict):
+        raise ValueError("[algorithm] section is required")
+    if algorithm.get("type") != "online":
+        raise ValueError("[algorithm].type must be 'online'")
+    method = algorithm.get("method")
+    if method and method not in {"policy_gradient", "ppo", "gspo"}:
+        raise ValueError("[algorithm].method must be policy_gradient/ppo/gspo")
+    if not algorithm.get("variety"):
+        raise ValueError("[algorithm].variety is required")
+
+    policy = cfg.get("policy")
+    model = cfg.get("model")
+
+    section: Dict[str, Any]
+    if isinstance(policy, dict):
+        section = policy
+        if not (policy.get("model_name") or policy.get("source")):
+            raise ValueError("[policy].model_name or [policy].source is required")
+    elif isinstance(model, dict):
+        section = model
+        if not (model.get("base") or model.get("source")):
+            raise ValueError("[model].base or [model].source is required")
+    else:
+        raise ValueError("[policy] or [model] section is required")
+
+    if not section.get("trainer_mode"):
+        raise ValueError("trainer_mode is required")
+    if not section.get("label"):
+        raise ValueError("label is required")
+
+    compute = cfg.get("compute")
+    if not isinstance(compute, dict):
+        raise ValueError("[compute] section is required")
+    if not compute.get("gpu_type"):
+        raise ValueError("[compute].gpu_type is required")
+    if not compute.get("gpu_count"):
+        raise ValueError("[compute].gpu_count is required")
+
+    rollout = cfg.get("rollout")
+    if not isinstance(rollout, dict):
+        raise ValueError("[rollout] section is required")
+    if not rollout.get("env_name"):
+        raise ValueError("[rollout].env_name is required")
+    if not rollout.get("policy_name"):
+        raise ValueError("[rollout].policy_name is required")
+
+    topology = cfg.get("topology") or compute.get("topology")
+    if not isinstance(topology, dict):
+        raise ValueError("[topology] or [compute.topology] is required")
+
+    training = cfg.get("training")
+    if training:
+        required_training_fields = (
+            "num_epochs",
+            "iterations_per_epoch",
+            "max_turns",
+            "batch_size",
+            "group_size",
+            "learning_rate",
+        )
+        for field in required_training_fields:
+            if field not in training:
+                raise ValueError(f"[training].{field} is required")
+
+    evaluation = cfg.get("evaluation")
+    if evaluation:
+        required_eval_fields = ("instances", "every_n_iters", "seeds")
+        for field in required_eval_fields:
+            if field not in evaluation:
+                raise ValueError(f"[evaluation].{field} is required")
+    
+    return None
+
+
+def validate_adas_cfg(cfg: Dict[str, Any], *, path: Path) -> None:
+    """Validate a graph/ADAS TOML config.
+
+    Uses the SDK validator so backend and CLI stay in sync.
+    """
+    from synth_ai.sdk.api.train.graph_validators import validate_graph_job_section
+
+    section = cfg.get("graph") or cfg.get("adas") or {}
+    validate_graph_job_section(section, base_dir=path.parent.resolve())
+
+
+def validate_train_cfg(path: Path, discovery: bool = False) -> TrainType:
+    def print_pass():
+        ctx_print("Check passed", not discovery)
+
+    ctx_print("\nChecking if .toml file", not discovery)
+    validate_file_type(path, ".toml")
+    print_pass()
+
+    ctx_print("\nChecking if TOML parses", not discovery)
+    cfg = tomllib.loads(path.read_text())
+    print_pass()
+
+    ctx_print("\nChecking if train type is valid", not discovery)
+    train_type = get_type(cfg)
+    if not train_type:
+        raise ValueError(
+            "Unable to determine training config type; expected [algorithm] or [prompt_learning] sections."
+        )
+    print_pass()
+
+    ctx_print(f"\nChecking if {train_type} config is valid", not discovery)
+    match train_type:
+        case "context_learning":
+            validate_context_learning_cfg(cfg)
+        case "prompt":
+            validate_po_cfg(cfg)
+        case "rl":
+            validate_rl_cfg(cfg)
+        case "sft":
+            validate_sft_cfg(cfg)
+        case "adas":
+            validate_adas_cfg(cfg, path=path)
+    print_pass()
+
+    return train_type
+
+
+def find_train_cfgs_in_cwd() -> List[Tuple[TrainType, str, str]]:
+    cwd = Path.cwd().resolve()
+    entries: List[Tuple[TrainType, str, str, float]] = []
+    for path in cwd.rglob("*.toml"):
+        if is_hidden_path(path, cwd):
+            continue
+        if not path.is_file():
+            continue
+        try:
+            train_type = validate_train_cfg(path, discovery=True)
+        except Exception:
+            continue
+        try:
+            rel_path = path.relative_to(cwd)
+        except ValueError:
+            rel_path = path
+        try:
+            mtime = path.stat().st_mtime
+            mtime_str = datetime.fromtimestamp(mtime).isoformat(
+                sep=" ",
+                timespec="seconds",
+            )
+        except OSError:
+            mtime = 0.0
+            mtime_str = ""
+        entries.append((train_type, str(rel_path), mtime_str, mtime))
+
+    entries.sort(key=lambda entry: entry[3], reverse=True)
+    return [(train_type, rel_path, mtime_str) for train_type, rel_path, mtime_str, _ in entries]