lex-llm 0.8.0 → 0.8.5

data/spec/support/tls_endpoint.rb

@@ -0,0 +1,92 @@
+# frozen_string_literal: true
+
+require 'openssl'
+require 'socket'
+require 'tempfile'
+require 'timeout'
+
+module SpecSupport
+  # One real HTTPS exchange, using a fresh private CA rather than external trust.
+  class TlsEndpoint
+    attr_reader :url, :ca_file, :requests
+
+    def initialize(subject_alt_name: 'IP:127.0.0.1')
+      ca_key = OpenSSL::PKey::EC.generate('prime256v1')
+      ca = certificate(key: ca_key, name: 'lex-llm test CA')
+      ca_extensions = OpenSSL::X509::ExtensionFactory.new
+      ca_extensions.subject_certificate = ca
+      ca_extensions.issuer_certificate = ca
+      ca.add_extension(ca_extensions.create_extension('basicConstraints', 'CA:TRUE', true))
+      ca.add_extension(ca_extensions.create_extension('keyUsage', 'keyCertSign,cRLSign', true))
+      ca.sign(ca_key, OpenSSL::Digest.new('SHA256'))
+
+      key = OpenSSL::PKey::EC.generate('prime256v1')
+      cert = certificate(key: key, name: 'lex-llm test endpoint')
+      cert.issuer = ca.subject
+      extensions = OpenSSL::X509::ExtensionFactory.new
+      extensions.subject_certificate = cert
+      extensions.issuer_certificate = ca
+      cert.add_extension(extensions.create_extension('basicConstraints', 'CA:FALSE', true))
+      cert.add_extension(extensions.create_extension('keyUsage', 'digitalSignature', true))
+      cert.add_extension(extensions.create_extension('extendedKeyUsage', 'serverAuth'))
+      cert.add_extension(extensions.create_extension('subjectAltName', subject_alt_name))
+      cert.sign(ca_key, OpenSSL::Digest.new('SHA256'))
+
+      @ca_file = Tempfile.new(['lex-llm-ca', '.pem'])
+      @ca_file.write(ca.to_pem)
+      @ca_file.flush
+      @requests = []
+      @listener = TCPServer.new('127.0.0.1', 0)
+      @url = "https://127.0.0.1:#{@listener.addr[1]}"
+      context = OpenSSL::SSL::SSLContext.new
+      context.cert = cert
+      context.key = key
+      server = OpenSSL::SSL::SSLServer.new(@listener, context)
+      @worker = Thread.new { serve(server: server) }
+    end
+
+    def finish
+      raise Timeout::Error, 'TLS fixture did not finish its exchange' unless @worker.join(5)
+
+      @worker.value
+    end
+
+    def close
+      @worker&.kill
+      @worker&.join
+      @listener&.close
+      @ca_file&.close!
+    end
+
+    private
+
+    def certificate(key:, name:)
+      cert = OpenSSL::X509::Certificate.new
+      cert.version = 2
+      cert.serial = OpenSSL::BN.rand(128).to_i
+      cert.subject = OpenSSL::X509::Name.parse("/CN=#{name}")
+      cert.issuer = cert.subject
+      cert.public_key = key
+      cert.not_before = Time.now - 60
+      cert.not_after = Time.now + 3600
+      cert
+    end
+
+    def serve(server:)
+      socket = server.accept
+      request = +''
+      while (line = socket.gets) && line != "\r\n"
+        request << line
+      end
+      return if request.empty?
+
+      @requests << request
+      body = '{"status":"ok"}'
+      socket.write("HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nContent-Length: #{body.bytesize}\r\nConnection: close\r\n\r\n#{body}")
+    rescue OpenSSL::SSL::SSLError => e
+      Legion::Logging.debug("TLS fixture handshake rejected: #{e.class}")
+    ensure
+      socket&.close
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lex-llm
 version: !ruby/object:Gem::Version
-  version: 0.8.0
+  version: 0.8.5
 platform: ruby
 authors:
 - LegionIO
@@ -267,6 +267,7 @@ files:
 - lib/legion/extensions/llm/canonical/response.rb
 - lib/legion/extensions/llm/canonical/strict.rb
 - lib/legion/extensions/llm/canonical/thinking.rb
+- lib/legion/extensions/llm/canonical/thinking_config.rb
 - lib/legion/extensions/llm/canonical/tool_call.rb
 - lib/legion/extensions/llm/canonical/tool_definition.rb
 - lib/legion/extensions/llm/canonical/tool_schema.rb
@@ -342,6 +343,7 @@ files:
 - spec/legion/extensions/llm/canonical/params_spec.rb
 - spec/legion/extensions/llm/canonical/request_spec.rb
 - spec/legion/extensions/llm/canonical/response_spec.rb
+- spec/legion/extensions/llm/canonical/thinking/config_spec.rb
 - spec/legion/extensions/llm/canonical/thinking_spec.rb
 - spec/legion/extensions/llm/canonical/tool_call_spec.rb
 - spec/legion/extensions/llm/canonical/tool_definition_spec.rb
@@ -386,6 +388,7 @@ files:
 - spec/legion/extensions/llm/connection_close_spec.rb
 - spec/legion/extensions/llm/connection_logging_spec.rb
 - spec/legion/extensions/llm/connection_retry_spec.rb
+- spec/legion/extensions/llm/connection_tls_spec.rb
 - spec/legion/extensions/llm/credential_sources_spec.rb
 - spec/legion/extensions/llm/error_middleware_spec.rb
 - spec/legion/extensions/llm/error_spec.rb
@@ -437,6 +440,7 @@ files:
 - spec/support/rspec_configuration.rb
 - spec/support/simplecov_configuration.rb
 - spec/support/ssot_registry_helpers.rb
+- spec/support/tls_endpoint.rb
 homepage: https://github.com/LegionIO/lex-llm
 licenses:
 - MIT