jules-ruby 0.0.67 → 0.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0b8c57f38a3d3f7419ad7bd5a6a1f2690ba72b0106ccbe01ce4cdf28b115af7d
-  data.tar.gz: 04cd808849c6993f215fd99a697e7b02553c3616ce308782881365c21f6f2026
+  metadata.gz: '08f7c3871c4be4346aedc491e1071191d9ca0c3b6177ebcf48501b9128b5608b'
+  data.tar.gz: 3e9ba72098d344c68194a8a0fcccb202aa9b2c8b0a198c6fed0fa97288a4cace
 SHA512:
-  metadata.gz: bd7a74a418c3fbaaf2b5118433ec6268dd4da3bd1485dfd066193c380953f742a9e1ef00067f6d29acdc0146ab43ce12d7495ca3676222d027ccd5cdbc667bb8
-  data.tar.gz: 31d50df4687c9fbfef15cab8299f3997cab960f5a5286f7bacd5db0e6094f7a42833747e14f23f1c4a70716e9c3821e114a1528842108889c4323666f78acca8
+  metadata.gz: 5cd91076f026b02f6a206681d84f35113ddd8394f9e9a7c9dcdbd0a79f843c3d0b1367e182e1e267772968ea9d14915ad9f0fa48260467e6a40b8a884da79ace
+  data.tar.gz: 91299b3412fdfe89aa2a4b852ecd7e9662d00cb36b34ec8f6e8268631d12c74b7ce757f51feec75429157e4468754283ff0024cf0a993a1ab4021c6cc1d496c2

data/.jules/bolt.md

@@ -2,3 +2,8 @@
 
 **Learning:** `Async::HTTP::Internet.new` is instantiated for every request in `JulesRuby::Client#request`, which likely prevents connection keep-alive/pooling.
 **Action:** A significant future optimization would be to reuse the `Async::HTTP::Internet` instance, but this requires careful management of the `Async` reactor lifecycle since the current implementation wraps each request in its own `Async { ... }.wait` block.
+
+## 2025-12-18 - Failed Optimization: Connection Reuse
+
+**Learning:** Attempted to reuse `Async::HTTP::Internet` in `JulesRuby::Client` to enable connection pooling. This failed because `JulesRuby::Client#request` wraps each call in a new `Async` reactor (`Async { ... }.wait`). Sockets are tied to the reactor they were created in; reusing them in a subsequent transient reactor causes errors or fails to work. Additionally, reusing the client instance makes `JulesRuby::Client` thread-unsafe.
+**Action:** Do not attempt connection pooling unless the entire application architecture changes to use a persistent reactor or `JulesRuby::Client` is refactored to be purely async (returning Tasks instead of blocking).

data/.jules/palette.md

@@ -0,0 +1,4 @@
+## 2025-12-18 - Better API Error Messages
+
+**Learning:** Users were receiving generic "Bad request" or "Server error" messages even when the API provided specific error details in the JSON body. This forced users to inspect exception objects to find the root cause.
+**Action:** Updated `Client#handle_response` to parse and bubble up specific error messages from the API response (e.g., `error.message` in JSON), significantly improving debuggability.

data/.jules/sentinel.md

@@ -0,0 +1,5 @@
+## 2025-12-18 - [Security] Validate Session URLs
+
+**Vulnerability:** The interactive CLI opened URLs from API responses using `system('open', url)` without validation, allowing execution of potentially unsafe schemes (e.g., `file://`) or arbitrary commands if the URL was maliciously crafted.
+**Learning:** `system('open', ...)` on macOS treats arguments as files or URLs, and can open applications. Trusting external input (even from our own API) for system commands carries risk.
+**Prevention:** Always validate URL schemes (allowlist `http`, `https`) before passing them to system commands.

data/README.md

@@ -1,13 +1,15 @@
-# Jules Ruby
+[![Gem Version](https://badge.fury.io/rb/jules-ruby.svg)](https://badge.fury.io/rb/jules-ruby)
+[![CI](https://github.com/tweibley/jules-ruby/actions/workflows/ci.yml/badge.svg)](https://github.com/tweibley/jules-ruby/actions/workflows/ci.yml)
+
+# jules-ruby
 
 <p align="center">
-  <img src="assets/banner.png" alt="Jules Ruby" width="600">
+  <img src="assets/banner.png" alt="jules-ruby" width="600">
 </p>
 
-[![Gem Version](https://badge.fury.io/rb/jules-ruby.svg)](https://badge.fury.io/rb/jules-ruby)
-[![CI](https://github.com/tweibley/jules-ruby/actions/workflows/ci.yml/badge.svg)](https://github.com/tweibley/jules-ruby/actions/workflows/ci.yml)
+A Ruby gem for interacting with the [jules API](https://developers.google.com/jules/api) to programmatically create and manage asynchronous coding tasks.
 
-A Ruby gem for interacting with the [Jules API](https://developers.google.com/jules/api) to programmatically create and manage asynchronous coding tasks.
+> 🚀 **New!** Use jules-ruby directly from [Gemini CLI](https://github.com/google-gemini/gemini-cli) with our extension: [jules-ruby-gemini-cli-extension](https://github.com/tweibley/jules-ruby-gemini-cli-extension)
 
 ## Installation
 
@@ -60,7 +62,7 @@ client = JulesRuby::Client.new(api_key: 'different_api_key')
 
 ## Command-Line Interface
 
-The gem includes a CLI for interacting with the Jules API from your terminal.
+The gem includes a CLI for interacting with the jules API from your terminal.
 
 ### Installation
 

data/jules-ruby.gemspec

@@ -2,7 +2,7 @@
 
 Gem::Specification.new do |spec|
   spec.name          = "jules-ruby"
-  spec.version       = "0.0.67"
+  spec.version       = "0.1.0"
   spec.authors       = ["Taylor Weibley"]
   spec.email         = ["tweibley@gmail.com"]
 

data/lib/jules-ruby/cli/interactive/session_manager.rb

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
+require 'uri'
 require_relative '../prompts'
 require_relative 'activity_renderer'
 require_relative 'session_creator'
@@ -193,7 +194,7 @@ module JulesRuby
           view_activities(session)
           :refresh
         when :open_url
-          system('open', session.url) if session.url
+          open_session_url(session)
           nil
         when :delete then delete_session?(session) ? :deleted : nil
         when :refresh then refresh_session(session)
@@ -252,6 +253,24 @@ module JulesRuby
         true
       end
 
+      def open_session_url(session)
+        return unless session.url
+
+        if safe_url?(session.url)
+          system('open', session.url)
+        else
+          @prompt.warn(Prompts.rgb_color("Invalid URL scheme: #{session.url}", :purple))
+          @prompt.keypress(Prompts.rgb_color('Press any key to continue...', :dim))
+        end
+      end
+
+      def safe_url?(url)
+        uri = URI.parse(url)
+        %w[http https].include?(uri.scheme)
+      rescue URI::InvalidURIError
+        false
+      end
+
       def refresh_session(session)
         Prompts.with_spinner('Refreshing...') do
           @client.sessions.find(session.name)

data/lib/jules-ruby/client.rb

@@ -14,6 +14,14 @@ module JulesRuby
       'Accept' => 'application/json'
     }.freeze
 
+    ERROR_MAPPING = {
+      400 => [BadRequestError, 'Bad request'],
+      401 => [AuthenticationError, 'Invalid API key'],
+      403 => [ForbiddenError, 'Access forbidden'],
+      404 => [NotFoundError, 'Resource not found'],
+      429 => [RateLimitError, 'Rate limit exceeded']
+    }.freeze
+
     def initialize(api_key: nil, base_url: nil, timeout: nil)
       @configuration = JulesRuby.configuration&.dup || Configuration.new
 
@@ -107,24 +115,44 @@ module JulesRuby
       body = response.read
       status = response.status
 
-      case status
-      when 200..299
-        body.nil? || body.empty? ? {} : JSON.parse(body)
-      when 400
-        raise BadRequestError.new('Bad request', status_code: status, response: body)
-      when 401
-        raise AuthenticationError.new('Invalid API key', status_code: status, response: body)
-      when 403
-        raise ForbiddenError.new('Access forbidden', status_code: status, response: body)
-      when 404
-        raise NotFoundError.new('Resource not found', status_code: status, response: body)
-      when 429
-        raise RateLimitError.new('Rate limit exceeded', status_code: status, response: body)
-      when 500..599
-        raise ServerError.new('Server error', status_code: status, response: body)
+      return parse_success_response(body) if (200..299).cover?(status)
+
+      handle_error_response(status, body)
+    end
+
+    def parse_success_response(body)
+      body.nil? || body.empty? ? {} : JSON.parse(body)
+    end
+
+    def handle_error_response(status, body)
+      if (klass, default_msg = ERROR_MAPPING[status])
+        raise klass.new(extract_error_message(body, default_msg), status_code: status, response: body)
+      end
+
+      if (500..599).cover?(status)
+        raise ServerError.new(extract_error_message(body, 'Server error'), status_code: status, response: body)
+      end
+
+      raise Error.new("Unexpected response: #{status}", status_code: status, response: body)
+    end
+
+    def extract_error_message(body, default)
+      return default if body.nil? || body.empty?
+
+      data = JSON.parse(body)
+      return default unless data.is_a?(Hash)
+
+      if data['error'].is_a?(Hash)
+        data.dig('error', 'message') || default
+      elsif data['error'].is_a?(String)
+        data['error']
+      elsif data['message'].is_a?(String)
+        data['message']
       else
-        raise Error.new("Unexpected response: #{status}", status_code: status, response: body)
+        default
       end
+    rescue JSON::ParserError
+      default
     end
   end
 end

data/lib/jules-ruby/models/session.rb

@@ -89,8 +89,10 @@ module JulesRuby
         state == 'COMPLETED'
       end
 
+      ACTIVE_STATES = %w[QUEUED PLANNING AWAITING_PLAN_APPROVAL AWAITING_USER_FEEDBACK IN_PROGRESS].freeze
+
       def active?
-        %w[QUEUED PLANNING AWAITING_PLAN_APPROVAL AWAITING_USER_FEEDBACK IN_PROGRESS].include?(state)
+        ACTIVE_STATES.include?(state)
       end
 
       private

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: jules-ruby
 version: !ruby/object:Gem::Version
-  version: 0.0.67
+  version: 0.1.0
 platform: ruby
 authors:
 - Taylor Weibley
@@ -159,6 +159,8 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".jules/bolt.md"
+- ".jules/palette.md"
+- ".jules/sentinel.md"
 - ".rubocop.yml"
 - AGENTS.md
 - CHANGELOG.md