Skip to content

Conversation

@dphuang2
Copy link
Collaborator

@dphuang2 dphuang2 commented Dec 16, 2025

  • Lots of other refactors

Note

Modernizes evaluator and CLI flows around the Fireworks SDK and trims deprecated commands.

  • Switches evaluator creation/upload and secrets APIs to the Fireworks SDK (replaces raw HTTP), with improved error handling and retries
  • Simplifies Evaluator to SDK-based create + get_upload_endpoint + validate_upload and tarball upload honoring ignore files
  • CLI cleanup: removes legacy/hidden commands (deploy, deploy-mcp, preview, run); keeps logs, upload, create rft, local-test, export-docs
  • upload: auto-generates flags from Fireworks().evaluators.create(); adds aliases/help overrides; reads all .env vars for secrets; supports --force
  • Respects --server to set FIREWORKS_API_BASE; logging/setup streamlined
  • Updates platform_api secret operations to use SDK types and methods
  • Bumps dependency to fireworks-ai==1.0.0a20; removes tests tied to deleted commands and adjusts CLI arg tests

Written by Cursor Bugbot for commit 1d7d807. This will update automatically on new commits. Configure here.

xzrderek and others added 3 commits December 16, 2025 09:54
…eworks-sdk-auto-generate-flags

# Conflicts:
#	development/CONTRIBUTING.md
#	docs/cli_reference/cli_overview.mdx
#	eval_protocol/auth.py
#	eval_protocol/cli_commands/utils.py
#	tests/test_auth.py
@dphuang2 dphuang2 changed the title Dhuang/dxe 442 refactor ep upload to use fireworks sdk auto generate flags Refactor ep upload to use Fireworks SDK + Auto-generate flags Dec 16, 2025
secrets[key] = value

return secrets
return env_vars
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All env vars now uploaded as secrets, not just API keys

The _load_secrets_from_env_file function previously filtered env vars to only include those with "API_KEY" in the name. This filtering logic was removed, so now ALL environment variables from the .env file are uploaded as Fireworks secrets. This could expose unintended data like DEBUG=true, LOG_LEVEL=info, database URLs, or other non-secret configuration. Additionally, the user-facing message at line 215 still says "API keys" which is now misleading since all env vars are uploaded.

Additional Locations (1)

Fix in Cursor Fix in Web

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants