fix(config): handle corrupted config.toml in get_credentials and set_credentials

get_credentials() called toml.load() without exception handling, causing
a raw TOMLDecodeError to crash any code that imports the runpod package
when ~/.runpod/config.toml is malformed. Return None on parse failure,
matching the existing pattern in check_credentials().

Author: deanq

runpod/cli/groups/config/functions.py

@@ -31,11 +31,15 @@ def set_credentials(api_key: str, profile: str = "default", overwrite=False) ->
     Path(CREDENTIAL_FILE).touch(exist_ok=True)
 
     if not overwrite:
-        with open(CREDENTIAL_FILE, "rb") as cred_file:
-            if profile in toml.load(cred_file):
-                raise ValueError(
-                    "Profile already exists. Use `update_credentials` instead."
-                )
+        try:
+            with open(CREDENTIAL_FILE, "rb") as cred_file:
+                existing = toml.load(cred_file)
+        except (TypeError, ValueError):
+            existing = {}
+        if profile in existing:
+            raise ValueError(
+                "Profile already exists. Use `update_credentials` instead."
+            )
 
     with open(CREDENTIAL_FILE, "w", encoding="UTF-8") as cred_file:
         cred_file.write("[" + profile + "]\n")
@@ -72,12 +76,18 @@ def check_credentials(profile: str = "default"):
 def get_credentials(profile="default"):
     """
     Returns the credentials for the specified profile from ~/.runpod/config.toml
+
+    Returns None if the file does not exist, is not valid TOML, or does not
+    contain the requested profile.
     """
     if not os.path.exists(CREDENTIAL_FILE):
         return None
 
-    with open(CREDENTIAL_FILE, "rb") as cred_file:
-        credentials = toml.load(cred_file)
+    try:
+        with open(CREDENTIAL_FILE, "rb") as cred_file:
+            credentials = toml.load(cred_file)
+    except (TypeError, ValueError):
+        return None
 
     if profile not in credentials:
         return None

tests/test_cli/test_cli_groups/test_config_functions.py

@@ -97,3 +97,49 @@ def test_get_credentials_non_existent_profile(
         assert result is None
         assert mock_open_call.called
         assert mock_exists.called
+
+    @patch("os.path.exists", return_value=True)
+    @patch(
+        "runpod.cli.groups.config.functions.toml.load",
+        side_effect=ValueError("Invalid value"),
+    )
+    @patch("builtins.open", new_callable=mock_open)
+    def test_get_credentials_corrupted_toml(
+        self, _mock_open_call, _mock_toml_load, _mock_exists
+    ):
+        """get_credentials returns None when config.toml contains invalid TOML."""
+        result = functions.get_credentials("default")
+        assert result is None
+
+    @patch("os.path.exists", return_value=True)
+    @patch(
+        "runpod.cli.groups.config.functions.toml.load",
+        side_effect=TypeError("bad type"),
+    )
+    @patch("builtins.open", new_callable=mock_open)
+    def test_get_credentials_type_error(
+        self, _mock_open_call, _mock_toml_load, _mock_exists
+    ):
+        """get_credentials returns None on TypeError from corrupted file."""
+        result = functions.get_credentials("default")
+        assert result is None
+
+    @patch("runpod.cli.groups.config.functions.toml.load")
+    @patch("builtins.open", new_callable=mock_open())
+    def test_set_credentials_corrupted_toml_allows_overwrite(
+        self, _mock_file, mock_toml_load
+    ):
+        """set_credentials with overwrite=True ignores corrupted existing file."""
+        mock_toml_load.side_effect = ValueError("Invalid TOML")
+        # overwrite=True skips the toml.load check entirely
+        functions.set_credentials("NEW_KEY", overwrite=True)
+
+    @patch("runpod.cli.groups.config.functions.toml.load")
+    @patch("builtins.open", new_callable=mock_open())
+    def test_set_credentials_corrupted_toml_no_overwrite(
+        self, _mock_file, mock_toml_load
+    ):
+        """set_credentials without overwrite treats corrupted file as empty."""
+        mock_toml_load.side_effect = ValueError("Invalid TOML")
+        # Should not raise — corrupted file is treated as having no profiles
+        functions.set_credentials("NEW_KEY", overwrite=False)