git-copilot-commit 0.4.5__py3-none-any.whl → 0.4.6__py3-none-any.whl

git_copilot_commit/cli.py

@@ -3,6 +3,7 @@ git-copilot-commit - AI-powered Git commit assistant
 """
 
 from pathlib import Path
+from typing import Annotated
 
 import rich
 import typer
@@ -18,6 +19,27 @@ from . import github_copilot
 console = Console()
 app = typer.Typer(help=__doc__, add_completion=False)
 
+CA_BUNDLE_HELP = (
+    "Path to a custom CA bundle (PEM). Use this to test internal / company CAs."
+)
+NATIVE_TLS_HELP = (
+    "Use the OS's native certificate store via 'truststore' for httpx instead of "
+    "the Python bundle. Ignored if --ca-bundle or --insecure is used."
+)
+
+CaBundleOption = Annotated[
+    str | None,
+    typer.Option("--ca-bundle", metavar="PATH", help=CA_BUNDLE_HELP),
+]
+InsecureOption = Annotated[
+    bool,
+    typer.Option("--insecure", help="Disable SSL certificate verification."),
+]
+NativeTlsOption = Annotated[
+    bool,
+    typer.Option("--native-tls/--no-native-tls", help=NATIVE_TLS_HELP),
+]
+
 
 def version_callback(value: bool):
     if value:
@@ -84,8 +106,24 @@ def load_system_prompt() -> str:
     raise typer.Exit(1)
 
 
+def build_http_client_config(
+    *,
+    ca_bundle: str | None,
+    insecure: bool,
+    native_tls: bool,
+) -> github_copilot.HttpClientConfig:
+    return github_copilot.HttpClientConfig(
+        native_tls=native_tls,
+        insecure=insecure,
+        ca_bundle=ca_bundle,
+    )
+
+
 def generate_commit_message(
-    repo: GitRepository, model: str | None = None, context: str = ""
+    repo: GitRepository,
+    model: str | None = None,
+    context: str = "",
+    http_client_config: github_copilot.HttpClientConfig | None = None,
 ) -> str:
     """Generate a conventional commit message using Copilot API."""
 
@@ -127,6 +165,7 @@ def generate_commit_message(
 {prompt}
             """,
         model=model,
+        http_client_config=http_client_config,
     )
 
 
@@ -157,10 +196,21 @@ def authenticate(
     force: bool = typer.Option(
         False, "--force", help="Replace cached GitHub Copilot credentials"
     ),
+    ca_bundle: CaBundleOption = None,
+    insecure: InsecureOption = False,
+    native_tls: NativeTlsOption = False,
 ):
     """Authenticate with GitHub Copilot and cache credentials locally."""
+    http_client_config = build_http_client_config(
+        ca_bundle=ca_bundle,
+        insecure=insecure,
+        native_tls=native_tls,
+    )
     try:
-        github_copilot.login(force=force)
+        github_copilot.login(
+            force=force,
+            http_client_config=http_client_config,
+        )
     except github_copilot.CopilotError as exc:
         console.print(f"[red]Authentication failed: {exc}[/red]")
         raise typer.Exit(1)
@@ -183,6 +233,9 @@ def commit(
         "-c",
         help="Optional user-provided context to guide commit message",
     ),
+    ca_bundle: CaBundleOption = None,
+    insecure: InsecureOption = False,
+    native_tls: NativeTlsOption = False,
 ):
     """
     Generate commit message based on changes in the current git repository and commit them.
@@ -198,9 +251,18 @@ def commit(
     except github_copilot.CopilotError:
         existing_credentials = None
 
+    http_client_config = build_http_client_config(
+        ca_bundle=ca_bundle,
+        insecure=insecure,
+        native_tls=native_tls,
+    )
+
     if existing_credentials is None:
         try:
-            github_copilot.login(force=True)
+            github_copilot.login(
+                force=True,
+                http_client_config=http_client_config,
+            )
         except github_copilot.CopilotError as exc:
             console.print(f"[red]Authentication failed: {exc}[/red]")
             raise typer.Exit(1)
@@ -248,13 +310,21 @@ def commit(
         )
 
     try:
-        github_copilot.ensure_auth_ready(model=model)
+        github_copilot.ensure_auth_ready(
+            model=model,
+            http_client_config=http_client_config,
+        )
 
         # Generate or use provided commit message
         with console.status(
             "[yellow]Generating commit message based on [bold]`git diff --staged`[/] ...[/yellow]"
         ):
-            commit_message = generate_commit_message(repo, model, context=context)
+            commit_message = generate_commit_message(
+                repo,
+                model,
+                context=context,
+                http_client_config=http_client_config,
+            )
     except github_copilot.CopilotError as exc:
         console.print(f"[red]Could not generate a commit message: {exc}[/red]")
         raise typer.Exit(1)

git_copilot_commit/github_copilot.py

@@ -13,7 +13,6 @@ from pathlib import Path
 from typing import Any, Callable, TypeVar
 
 import httpx
-import typer
 from rich.console import Console
 from rich.panel import Panel
 from rich.table import Table
@@ -42,14 +41,7 @@ DEFAULT_MODEL_PREFERENCES = (
     "gpt-4o",
 )
 
-app = typer.Typer(
-    add_completion=False,
-    no_args_is_help=True,
-    help="General-purpose GitHub Copilot CLI.",
-)
-
 console = Console()
-console_err = Console(stderr=True)
 T = TypeVar("T")
 
 
@@ -164,6 +156,25 @@ class CopilotModel:
         )
 
 
+@dataclass(frozen=True, slots=True)
+class HttpClientConfig:
+    native_tls: bool = False
+    insecure: bool = False
+    ca_bundle: str | None = None
+
+    @property
+    def use_native_tls(self) -> bool:
+        return self.native_tls and not self.insecure and self.ca_bundle is None
+
+    @property
+    def verify(self) -> bool | str:
+        if self.insecure:
+            return False
+        if self.ca_bundle:
+            return self.ca_bundle
+        return True
+
+
 @dataclass(slots=True)
 class GitHubViewer:
     login: str
@@ -272,8 +283,34 @@ def get_github_copilot_base_url(
     return "https://api.individual.githubcopilot.com"
 
 
-def make_http_client() -> httpx.Client:
+_NATIVE_TLS_ENABLED = False
+
+
+def _maybe_enable_native_tls(native_tls: bool) -> None:
+    """
+    Globally switch httpx/requests to use the OS certificate store via truststore.
+    Safe to call multiple times; it no-ops after the first.
+    """
+    global _NATIVE_TLS_ENABLED
+    if not native_tls or _NATIVE_TLS_ENABLED:
+        return
+
+    try:
+        import truststore
+
+        truststore.inject_into_ssl()
+    except Exception as _:
+        return
+
+    _NATIVE_TLS_ENABLED = True
+
+
+def make_http_client(http_client_config: HttpClientConfig | None = None) -> httpx.Client:
+    config = http_client_config or HttpClientConfig()
+    _maybe_enable_native_tls(config.use_native_tls)
+
     return httpx.Client(
+        verify=config.verify,
         follow_redirects=True,
         timeout=httpx.Timeout(30.0, connect=10.0),
     )
@@ -1140,7 +1177,12 @@ def print_login_summary(
     console.print(Panel.fit(table, title="Login Summary"))
 
 
-def login(enterprise_domain: str | None = None, force: bool = False) -> None:
+def login(
+    enterprise_domain: str | None = None,
+    force: bool = False,
+    *,
+    http_client_config: HttpClientConfig | None = None,
+) -> None:
     """Authenticate with GitHub and cache Copilot credentials locally."""
     normalized_domain = normalize_domain(enterprise_domain)
     if enterprise_domain and not normalized_domain:
@@ -1159,7 +1201,7 @@ def login(enterprise_domain: str | None = None, force: bool = False) -> None:
         )
 
     domain = normalized_domain or DEFAULT_GITHUB_DOMAIN
-    with make_http_client() as client:
+    with make_http_client(http_client_config) as client:
         device = start_device_flow(client, domain)
 
         console.print(
@@ -1220,9 +1262,13 @@ def _ask_once(client: httpx.Client, prompt: str, model: str | None = None) -> st
     )
 
 
-def _with_reauthentication(action: Callable[[httpx.Client], T]) -> T:
+def _with_reauthentication(
+    action: Callable[[httpx.Client], T],
+    *,
+    http_client_config: HttpClientConfig | None = None,
+) -> T:
     try:
-        with make_http_client() as client:
+        with make_http_client(http_client_config) as client:
             return action(client)
     except CopilotError as exc:
         if not should_reauthenticate(exc):
@@ -1231,21 +1277,33 @@ def _with_reauthentication(action: Callable[[httpx.Client], T]) -> T:
     console.print(
         "[yellow]Cached GitHub Copilot credentials are missing or no longer valid. Starting authentication...[/yellow]"
     )
-    login(force=True)
+    login(force=True, http_client_config=http_client_config)
 
-    with make_http_client() as client:
+    with make_http_client(http_client_config) as client:
         return action(client)
 
 
-def ensure_auth_ready(model: str | None = None) -> None:
+def ensure_auth_ready(
+    model: str | None = None,
+    *,
+    http_client_config: HttpClientConfig | None = None,
+) -> None:
     def validate(client: httpx.Client) -> None:
         credentials = ensure_fresh_credentials(client)
         all_models = list_models(client, credentials)
         pick_model(all_models, model)
 
-    _with_reauthentication(validate)
+    _with_reauthentication(validate, http_client_config=http_client_config)
 
 
-def ask(prompt: str, model: str | None = None) -> str:
+def ask(
+    prompt: str,
+    model: str | None = None,
+    *,
+    http_client_config: HttpClientConfig | None = None,
+) -> str:
     """Send a prompt to GitHub Copilot and print the reply."""
-    return _with_reauthentication(lambda client: _ask_once(client, prompt, model))
+    return _with_reauthentication(
+        lambda client: _ask_once(client, prompt, model),
+        http_client_config=http_client_config,
+    )

{git_copilot_commit-0.4.5.dist-info → git_copilot_commit-0.4.6.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: git-copilot-commit
-Version: 0.4.5
+Version: 0.4.6
 Summary: Automatically generate and commit changes using copilot
 Author-email: Dheepak Krishnamurthy <1813121+kdheepak@users.noreply.github.com>
 License-File: LICENSE
@@ -8,6 +8,7 @@ Requires-Python: >=3.12
 Requires-Dist: httpx>=0.28.0
 Requires-Dist: platformdirs>=4.0.0
 Requires-Dist: rich>=14.0.0
+Requires-Dist: truststore>=0.10.4
 Requires-Dist: typer>=0.16.0
 Description-Content-Type: text/markdown
 

{git_copilot_commit-0.4.5.dist-info → git_copilot_commit-0.4.6.dist-info}/RECORD

@@ -1,13 +1,13 @@
 git_copilot_commit/__init__.py,sha256=v3x5oBkxwKJEZLv62QqSmP3iqNKLtZgrWZfH8eFzlQg,60
-git_copilot_commit/cli.py,sha256=gXRoJDhpW0Ck7-sBDpMmulYztUH1IExuF-SczbgQqF0,9434
+git_copilot_commit/cli.py,sha256=-zC3HeYvbEO3ahPNfB7C-GjRiXJT-juOF9eeLmqKwRo,11375
 git_copilot_commit/git.py,sha256=f42GawgkyrsFkl127XvDrdg2xVEf87lb-5QO04nuRoU,9459
-git_copilot_commit/github_copilot.py,sha256=lP-LLk4mOC4D9-rCtxIBs7XN_oFImZHpoKyHNBQFf-c,39484
+git_copilot_commit/github_copilot.py,sha256=LxLKyqt6Pnoks5yyWJANJbbZSLrPBSJeycgmlXydYY4,40937
 git_copilot_commit/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 git_copilot_commit/settings.py,sha256=asaCxX_TAr5lCRkoSLtHSk1eUrT-y4bJbLUNQZSzAs0,2793
 git_copilot_commit/version.py,sha256=AieHOUX52g6N67HL0iLWtDKrgOYyulxwHWViu26Jrd4,105
 git_copilot_commit/prompts/commit-message-generator-prompt.md,sha256=ZvllyqtsLRwj6NmvygNGFajdLKNkO67hUnLsR_P1WOs,2370
-git_copilot_commit-0.4.5.dist-info/METADATA,sha256=BFvZy64MhMB6GGeAiBS6L7N5EcPqNS_9miCE8roZ9E8,4059
-git_copilot_commit-0.4.5.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-git_copilot_commit-0.4.5.dist-info/entry_points.txt,sha256=Imboc0oJa4Oq1O3C-wWcy7ZxfsVSkkC-OC-iPbTn3Fg,66
-git_copilot_commit-0.4.5.dist-info/licenses/LICENSE,sha256=14lNZAoKJPI1U7eGpletjN_PFm1JwP1vT_0jFKY6eWg,1065
-git_copilot_commit-0.4.5.dist-info/RECORD,,
+git_copilot_commit-0.4.6.dist-info/METADATA,sha256=QThEE-BBVwlHTRuetVwP9zZHtO3ikrUAGWt0DFtQCXc,4093
+git_copilot_commit-0.4.6.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+git_copilot_commit-0.4.6.dist-info/entry_points.txt,sha256=Imboc0oJa4Oq1O3C-wWcy7ZxfsVSkkC-OC-iPbTn3Fg,66
+git_copilot_commit-0.4.6.dist-info/licenses/LICENSE,sha256=14lNZAoKJPI1U7eGpletjN_PFm1JwP1vT_0jFKY6eWg,1065
+git_copilot_commit-0.4.6.dist-info/RECORD,,