@tiens.nguyen/gonext-local-worker 1.0.95 → 1.0.96

package/gonext_agent_chat.py

@@ -407,6 +407,21 @@ def _render_pdf_bytes(markdown_text: str, title: str = "") -> bytes:
     return out.getvalue()
 
 
+def _ssl_context():
+    """SSL context backed by certifi's CA bundle.
+
+    macOS Python (python.org / Homebrew) doesn't use the system keychain, so urllib's
+    default verification fails with CERTIFICATE_VERIFY_FAILED. certifi ships with the
+    openai/httpx stack the worker already depends on.
+    """
+    import ssl
+    try:
+        import certifi
+        return ssl.create_default_context(cafile=certifi.where())
+    except Exception:  # noqa: BLE001 — fall back to system defaults
+        return ssl.create_default_context()
+
+
 def _pdf_upload_via_api(api_base: str, worker_key: str, file_name: str,
                         pdf_bytes: bytes) -> str:
     """Ask the API to presign an S3 upload, PUT the PDF bytes, return the download URL.
@@ -416,6 +431,7 @@ def _pdf_upload_via_api(api_base: str, worker_key: str, file_name: str,
     import urllib.request as _u
     import urllib.error as _ue
 
+    ctx = _ssl_context()
     base = (api_base or "").rstrip("/")
     if not base or not worker_key:
         raise RuntimeError("PDF upload is not available: worker API base/key missing.")
@@ -431,7 +447,7 @@ def _pdf_upload_via_api(api_base: str, worker_key: str, file_name: str,
         method="POST",
     )
     try:
-        with _u.urlopen(req, timeout=30) as resp:
+        with _u.urlopen(req, timeout=30, context=ctx) as resp:
             ref = json.loads(resp.read().decode("utf-8"))
     except _ue.HTTPError as e:  # noqa: PERF203
         detail = e.read().decode("utf-8", "replace")[:300]
@@ -453,7 +469,7 @@ def _pdf_upload_via_api(api_base: str, worker_key: str, file_name: str,
         method="PUT",
     )
     try:
-        with _u.urlopen(put_req, timeout=60) as up:
+        with _u.urlopen(put_req, timeout=60, context=ctx) as up:
             if up.status not in (200, 201, 204):
                 raise RuntimeError(f"S3 upload failed (HTTP {up.status}).")
     except _ue.HTTPError as e:  # noqa: PERF203

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiens.nguyen/gonext-local-worker",
-  "version": "1.0.95",
+  "version": "1.0.96",
   "description": "Polls GoNext cloud API for async local LLM jobs and runs them against Ollama/OpenAI-compatible servers on this Mac",
   "type": "module",
   "license": "MIT",