inloop-brain 0.0.9 → 0.0.10

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 61025b8763503388d32c42d1169bd9e4231da28b6d383a7e9039fe55bc5e951e
-  data.tar.gz: 3da29a86dca04caf0b20cb08bc1cc7a7c1597613bee59042d2cf0ef863b62499
+  metadata.gz: af66fbbb5672cf09b9b5eb5d4ae4d018adc4dd7f2a5be343dae2c93a74732bac
+  data.tar.gz: 21efedeaa7f002463d145091df3772c0839db24cbfc762d797a8344f657b85ec
 SHA512:
-  metadata.gz: 4c484e3325531265497f6e2e1bd914e0b6f4525505840095af558330b2c28edaf8528eb9325205bdb349725db605640af96c622298b46474009d8bc186e8d23e
-  data.tar.gz: 7f516136819c318c81718348a61598c414b931fa3d54c385f8d11868081035e0c251963bc760906674a111f0be6269754cf35e91ef8a4adfbe7c9ef9381791e4
+  metadata.gz: 03b35d39d7f88c6d788cace6ba09cd524bb4fed2bb3ca6ca4080d23a2d33877a4da7ba7b106db57d596e8aa7f0f3499a0eda25529beacf1731c4968a4390f824
+  data.tar.gz: b198e63d50a928d4e7095598795437aae57071e7bf2003bf7bfb9ec6544286cd50f137f3d41f48401c2c2d61a6b7811edf7b927ab03d072811d88a579b833fbc

data/README.md

@@ -33,6 +33,7 @@ Use an API key generated from the Brain API share link in app.inloop.studio. The
 - `INLOOP_BRAIN_MODEL`: Model name to send (default: inloop-brain)
 - `INLOOP_BRAIN_HOST`: Host override (default: app.inloop.studio)
 - `INLOOP_BRAIN_PROTOCOL`: Protocol override (default: https)
+- `INLOOP_BRAIN_SSL_STRICT`: Set to `1` to enforce strict TLS verification (disables the default compatibility behavior that ignores missing certificate CRLs)
 
 ### Options
 
@@ -44,7 +45,7 @@ Use an API key generated from the Brain API share link in app.inloop.studio. The
 
 ### Dependencies
 
-- bundler (~> 2.0)
+- bundler (>= 2.0, < 5)
 - rake (~> 13.0)
 - rspec (~> 3.0)
 

data/bin/inloop-brain

@@ -2,10 +2,13 @@
 
 # bin/inloop-brain - A command-line tool to interact with the Inloop Brain API (OpenAI-compatible)
 
+$LOAD_PATH.unshift(File.expand_path("../lib", __dir__))
+
 require 'optparse'
 require 'net/http'
 require 'uri'
 require 'json'
+require 'inloop_brain/ssl'
 
 # Parse command line options
 options = {}
@@ -74,6 +77,23 @@ end
 http = Net::HTTP.new(uri.host, uri.port)
 http.use_ssl = (uri.scheme == 'https')
 
+# Some environments enable CRL checking globally for TLS verification but do not
+# provide the CRLs, causing OpenSSL to abort with:
+#   "certificate verify failed (unable to get certificate CRL)"
+# We keep certificate verification enabled, but soft-fail only those CRL-missing
+# errors by default. Set INLOOP_BRAIN_SSL_STRICT=1 to disable this compatibility
+# behavior.
+if http.use_ssl?
+  http.verify_mode = OpenSSL::SSL::VERIFY_PEER
+  http.verify_hostname = true if http.respond_to?(:verify_hostname=)
+
+  strict_ssl = ENV.fetch('INLOOP_BRAIN_SSL_STRICT', '').to_s.downcase
+  strict_ssl = %w[1 true yes].include?(strict_ssl)
+  unless strict_ssl
+    http.verify_callback = InloopBrain::SSL.allow_missing_crl_verify_callback(debug: options[:debug])
+  end
+end
+
 # Add proper timeout settings
 http.open_timeout = 10
 http.read_timeout = 60
@@ -83,7 +103,7 @@ request = Net::HTTP::Post.new(uri)
 request['Content-Type'] = 'application/json'
 request['Accept'] = 'application/json'
 request['Authorization'] = "Bearer #{options[:key]}"
-request['User-Agent'] = 'Inloop-Brain-CLI/0.0.9'
+request['User-Agent'] = 'Inloop-Brain-CLI/0.0.10'
 
 messages = []
 messages << { role: 'system', content: options[:system] } if options[:system].to_s.strip != ''

data/lib/inloop_brain/ssl.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+require 'openssl'
+
+module InloopBrain
+  module SSL
+    # Compatibility verify callback that soft-fails missing CRL errors.
+    #
+    # Some systems enable CRL checking globally for TLS verification but do not
+    # ship or fetch CRLs, causing OpenSSL to fail with:
+    #   "certificate verify failed (unable to get certificate CRL)"
+    #
+    # This callback preserves strict verification for all other errors.
+    def self.allow_missing_crl_verify_callback(debug: false, io: $stderr)
+      proc do |preverify_ok, store_ctx|
+        if preverify_ok
+          true
+        else
+          err = store_ctx.error
+          if err == OpenSSL::X509::V_ERR_UNABLE_TO_GET_CRL ||
+             err == OpenSSL::X509::V_ERR_UNABLE_TO_GET_CRL_ISSUER
+            if debug
+              io.puts "Warning: SSL certificate CRL unavailable (#{store_ctx.error_string}); continuing without CRL check"
+            end
+            store_ctx.error = OpenSSL::X509::V_OK if store_ctx.respond_to?(:error=)
+            true
+          else
+            false
+          end
+        end
+      end
+    end
+  end
+end

metadata

@@ -1,29 +1,35 @@
 --- !ruby/object:Gem::Specification
 name: inloop-brain
 version: !ruby/object:Gem::Version
-  version: 0.0.9
+  version: 0.0.10
 platform: ruby
 authors:
 - Abhishek Parolkar
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-02-02 00:00:00.000000000 Z
+date: 2026-02-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '5'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '5'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -61,13 +67,10 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
-- ".github/workflows/push.yml"
-- Gemfile
 - LICENSE.txt
 - README.md
-- Rakefile
 - bin/inloop-brain
-- inloop-brain.gemspec
+- lib/inloop_brain/ssl.rb
 homepage: https://inloop.studio
 licenses:
 - Nonstandard

data/.github/workflows/push.yml

@@ -1,34 +0,0 @@
-name: Publish RubyGem
-
-on:
-  workflow_dispatch:
-    inputs:
-      release_tag:
-        description: "Optional git tag to publish"
-        required: false
-        default: ""
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      id-token: write
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Checkout tag
-        if: inputs.release_tag != ''
-        run: git checkout "${{ inputs.release_tag }}"
-
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: "3.2"
-          bundler-cache: true
-
-      - name: Release gem via Trusted Publisher (OIDC)
-        uses: rubygems/release-gem@v1

data/Gemfile

@@ -1,3 +0,0 @@
-source "https://rubygems.org"
-
-gemspec

data/Rakefile

@@ -1,6 +0,0 @@
-require "bundler/gem_tasks"
-require "rspec/core/rake_task"
-
-RSpec::Core::RakeTask.new(:spec)
-
-task :default => :spec

data/inloop-brain.gemspec

@@ -1,32 +0,0 @@
-
-
-Gem::Specification.new do |spec|
-  spec.name          = "inloop-brain"
-  spec.version       = "0.0.9"
-  spec.authors       = ["Abhishek Parolkar"]
-  spec.email         = ["abhishek@inloop.studio"]
-
-  spec.summary       = "Command-line interface for the Inloop Brain Access Kit"
-  spec.description   = "A simple command-line tool that sends prompts to the Inloop Brain Access Kit API and returns responses"
-  spec.homepage      = "https://inloop.studio"
-  spec.license       = "Nonstandard"
-  spec.required_ruby_version = Gem::Requirement.new(">= 2.6.0")
-
-  spec.metadata["homepage_uri"] = spec.homepage
-  spec.metadata["source_code_uri"] = "https://github.com/inloopstudio-team/inloop-brain" 
-  spec.metadata["changelog_uri"] = "https://github.com/inloopstudio-team/inloop-brain/blob/main/CHANGELOG.md" # Replace with actual changelog URL
-
-  # Specify which files should be added to the gem when it is released.
-  # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
-  spec.files = Dir.chdir(File.expand_path('..', __FILE__)) do
-    `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
-  end
-  spec.bindir        = "bin"
-  spec.executables   = ["inloop-brain"]
-
-
-  # Dependencies
-  spec.add_development_dependency "bundler", "~> 2.0"
-  spec.add_development_dependency "rake", "~> 13.0"
-  spec.add_development_dependency "rspec", "~> 3.0"
-end