symphony-code 0.0.2__tar.gz → 0.0.3__tar.gz

{symphony_code-0.0.2 → symphony_code-0.0.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: symphony-code
-Version: 0.0.2
+Version: 0.0.3
 Summary: Symphony coding agent: workspace tools, JSONL sessions, and a Textual TUI on top of symphony-harness (import as coding_agent; run as `symphony`)
 Author: Sarthak Chauhan
 Author-email: Sarthak Chauhan <sarthakchauhann@gmail.com>
@@ -10,6 +10,7 @@ Requires-Dist: symphony-core
 Requires-Dist: symphony-harness
 Requires-Dist: pillow>=12.3.0
 Requires-Dist: pydantic>=2.0.0
+Requires-Dist: certifi>=2024.2.2
 Requires-Dist: pyyaml>=6.0.3
 Requires-Dist: textual>=8.2.8
 Requires-Dist: textual-image>=0.12.0

{symphony_code-0.0.2 → symphony_code-0.0.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "symphony-code"
-version = "0.0.2"
+version = "0.0.3"
 description = "Symphony coding agent: workspace tools, JSONL sessions, and a Textual TUI on top of symphony-harness (import as coding_agent; run as `symphony`)"
 readme = "README.md"
 license = "MIT"
@@ -11,6 +11,7 @@ dependencies = [
     "symphony-harness",
     "pillow>=12.3.0",
     "pydantic>=2.0.0",
+    "certifi>=2024.2.2",
     "pyyaml>=6.0.3",
     "textual>=8.2.8",
     "textual-image>=0.12.0",

{symphony_code-0.0.2 → symphony_code-0.0.3}/pyproject.toml.orig

@@ -1,6 +1,6 @@
 [project]
 name = "symphony-code"
-version = "0.0.2"
+version = "0.0.3"
 description = "Symphony coding agent: workspace tools, JSONL sessions, and a Textual TUI on top of symphony-harness (import as coding_agent; run as `symphony`)"
 readme = "README.md"
 license = "MIT"
@@ -14,6 +14,8 @@ dependencies = [
     "symphony-harness",
     "pillow>=12.3.0",
     "pydantic>=2.0.0",
+    # coding_agent.tls: stdlib HTTPS on uv-managed Pythons without a CA store.
+    "certifi>=2024.2.2",
     "pyyaml>=6.0.3",
     "textual>=8.2.8",
     "textual-image>=0.12.0",

symphony_code-0.0.3/src/coding_agent/tls.py

@@ -0,0 +1,25 @@
+"""TLS for the standard-library HTTPS calls: the PyPI update check and the
+Symphony Web bundle download.
+
+uv-managed Pythons on macOS ship an OpenSSL whose default CA path does not
+exist, so ``urllib`` cannot verify PyPI or GitHub there. The context keeps the
+default trust (including ``SSL_CERT_FILE`` / ``SSL_CERT_DIR``) and adds
+certifi's bundle, which httpx already uses for provider requests.
+"""
+
+from __future__ import annotations
+
+import ssl
+from functools import cache
+
+import certifi
+
+
+@cache
+def https_context() -> ssl.SSLContext:
+    context = ssl.create_default_context()
+    context.load_verify_locations(cafile=certifi.where())
+    return context
+
+
+__all__ = ["https_context"]

{symphony_code-0.0.2 → symphony_code-0.0.3}/src/coding_agent/updates.py

@@ -103,9 +103,14 @@ def latest_version(
 ) -> str | None:
     """Return the newest PyPI version, or None when PyPI cannot be reached."""
     request = urllib.request.Request(PYPI_URL, headers={"Accept": "application/json"})
-    open_url = opener or urllib.request.urlopen
+    if opener is None:
+        from coding_agent.tls import https_context
+
+        def opener(request: urllib.request.Request, *, timeout: float) -> object:
+            return urllib.request.urlopen(request, timeout=timeout, context=https_context())
+
     try:
-        with open_url(request, timeout=timeout) as response:
+        with opener(request, timeout=timeout) as response:
             payload = json.loads(response.read().decode("utf-8"))
     except (OSError, urllib.error.URLError, TimeoutError, json.JSONDecodeError, UnicodeError, ValueError):
         return None
@@ -189,7 +194,7 @@ def run_startup_update_check(*, unattended: bool = False) -> str:
     config = ensure_spawn_settings(symphony_dir())
     if unattended and not config.updates.auto:
         return "continue"
-    return startup_update_check(config.updates.model_dump()).action
+    return startup_update_check({"updates": config.updates.model_dump()}).action
 
 
 def startup_update_check(

{symphony_code-0.0.2 → symphony_code-0.0.3}/src/coding_agent/web/bundle.py

@@ -37,6 +37,8 @@ import uuid
 from collections.abc import Callable
 from pathlib import Path, PurePosixPath
 
+from coding_agent.tls import https_context
+
 RELEASES = "https://github.com/Sarthakischauhan/symphony/releases/download"
 TIMEOUT_SECONDS = 60.0
 CURRENT = "current"
@@ -68,7 +70,10 @@ def asset_url(version: str, *, base: str | None = None) -> str:
 def download(url: str, dest: Path) -> None:
     """Stream one URL to a file; any network error leaves only the partial temp file."""
     try:
-        with urllib.request.urlopen(url, timeout=TIMEOUT_SECONDS) as response, dest.open("wb") as out:
+        with (
+            urllib.request.urlopen(url, timeout=TIMEOUT_SECONDS, context=https_context()) as response,
+            dest.open("wb") as out,
+        ):
             shutil.copyfileobj(response, out)
     except OSError as exc:
         raise BundleError(f"download failed: {url}: {exc}") from exc