xone-cli 0.1.3__tar.gz → 0.1.4__tar.gz

{xone_cli-0.1.3 → xone_cli-0.1.4}/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.1.4
+
+- Add a `curl` fallback for GitHub metadata refresh when Python's local certificate store cannot verify the GitHub API certificate.
+- Keep open-source adoption evaluation from failing on macOS/Python certificate-store drift.
+
 ## 0.1.3
 
 - Add `xone eval open-source` for repeatable, sanitized open-source adoption evaluation.

{xone_cli-0.1.3/src/xone_cli.egg-info → xone_cli-0.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: xone-cli
-Version: 0.1.3
+Version: 0.1.4
 Summary: Unified CLI entry point for X-One Agent Evidence Loop workflows.
 Author: X-One-AI
 License-Expression: MIT

{xone_cli-0.1.3 → xone_cli-0.1.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "xone-cli"
-version = "0.1.3"
+version = "0.1.4"
 description = "Unified CLI entry point for X-One Agent Evidence Loop workflows."
 readme = "README.md"
 requires-python = ">=3.11"

{xone_cli-0.1.3 → xone_cli-0.1.4}/src/xone_cli/__init__.py

@@ -1,3 +1,3 @@
 from __future__ import annotations
 
-__version__ = "0.1.3"
+__version__ = "0.1.4"

{xone_cli-0.1.3 → xone_cli-0.1.4}/src/xone_cli/open_source_eval.py

@@ -2,6 +2,7 @@ from __future__ import annotations
 
 import json
 import subprocess
+import urllib.error
 import urllib.request
 from dataclasses import dataclass
 from datetime import date
@@ -147,12 +148,7 @@ def normalize_repo_ref(value: str) -> str:
 
 
 def fetch_github_metadata(repo: str, snapshot_date: date) -> dict:
-    request = urllib.request.Request(
-        f"https://api.github.com/repos/{repo}",
-        headers={"Accept": "application/vnd.github+json", "User-Agent": "xone-cli-open-source-eval"},
-    )
-    with urllib.request.urlopen(request, timeout=20) as response:
-        payload = json.load(response)
+    payload = _fetch_github_payload(repo)
     return {
         "source": payload["full_name"],
         "source_url": payload["html_url"],
@@ -165,6 +161,28 @@ def fetch_github_metadata(repo: str, snapshot_date: date) -> dict:
     }
 
 
+def _fetch_github_payload(repo: str) -> dict:
+    request = urllib.request.Request(
+        f"https://api.github.com/repos/{repo}",
+        headers={"Accept": "application/vnd.github+json", "User-Agent": "xone-cli-open-source-eval"},
+    )
+    try:
+        with urllib.request.urlopen(request, timeout=20) as response:
+            return json.load(response)
+    except (urllib.error.URLError, TimeoutError, OSError) as exc:
+        try:
+            completed = subprocess.run(
+                ["curl", "-fsSL", f"https://api.github.com/repos/{repo}"],
+                check=True,
+                text=True,
+                stdout=subprocess.PIPE,
+                stderr=subprocess.PIPE,
+            )
+        except (FileNotFoundError, subprocess.CalledProcessError) as fallback_exc:
+            raise RuntimeError(f"Unable to fetch GitHub metadata for {repo}: {exc}; fallback failed: {fallback_exc}") from fallback_exc
+        return json.loads(completed.stdout)
+
+
 def clone_repo(record: dict, root: Path) -> Path:
     root.mkdir(parents=True, exist_ok=True)
     target = root / record["source"].replace("/", "-")

{xone_cli-0.1.3 → xone_cli-0.1.4/src/xone_cli.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: xone-cli
-Version: 0.1.3
+Version: 0.1.4
 Summary: Unified CLI entry point for X-One Agent Evidence Loop workflows.
 Author: X-One-AI
 License-Expression: MIT

{xone_cli-0.1.3 → xone_cli-0.1.4}/tests/test_cli.py

@@ -12,7 +12,7 @@ def _fake_tool(bin_dir: Path, name: str, body: str = "echo tool") -> None:
 
 def test_version_outputs_package_version(capsys):
     assert main(["--version"]) == 0
-    assert capsys.readouterr().out.strip() == "xone 0.1.3"
+    assert capsys.readouterr().out.strip() == "xone 0.1.4"
 
 
 def test_doctor_json_reports_required_tools(tmp_path, monkeypatch, capsys):

{xone_cli-0.1.3 → xone_cli-0.1.4}/tests/test_docs.py

@@ -30,9 +30,9 @@ def test_docs_and_package_metadata_stay_aligned():
     assert "xone eval open-source --repos repos.txt" in Path("docs/install.md").read_text(encoding="utf-8")
     assert "xone release verify --build --install --smoke" in Path("docs/release.md").read_text(encoding="utf-8")
     assert 'name = "xone-cli"' in pyproject
-    assert 'version = "0.1.3"' in pyproject
-    assert __version__ == "0.1.3"
-    assert "## 0.1.3" in changelog
+    assert 'version = "0.1.4"' in pyproject
+    assert __version__ == "0.1.4"
+    assert "## 0.1.4" in changelog
     assert 'xone = "xone_cli.cli:entrypoint"' in pyproject
     assert "python -m pytest -q" in ci
     assert "xone runbook --base HEAD~1 --head HEAD --dry-run" in ci

{xone_cli-0.1.3 → xone_cli-0.1.4}/tests/test_open_source_eval.py

@@ -1,7 +1,10 @@
 import json
+import urllib.error
 from datetime import date
+from types import SimpleNamespace
 
 from xone_cli.cli import main
+from xone_cli.open_source_eval import fetch_github_metadata
 
 
 def test_eval_open_source_json_outputs_sanitized_records(tmp_path, monkeypatch):
@@ -137,3 +140,34 @@ def test_eval_open_source_records_clone_failure_without_crashing(tmp_path, monke
     assert failed_command["result"] == "fail"
     assert failed_command["mode"] == "read-only"
     assert payload["records"][1]["commands_run"][1]["name"] == "runbook-dry-run"
+
+
+def test_fetch_github_metadata_falls_back_when_urllib_cert_fails(monkeypatch):
+    def fail_urlopen(_request, timeout):
+        raise urllib.error.URLError("certificate verify failed")
+
+    def fake_run(command, check, text, stdout, stderr):
+        assert command == ["curl", "-fsSL", "https://api.github.com/repos/openai/codex"]
+        return SimpleNamespace(
+            stdout=json.dumps(
+                {
+                    "full_name": "openai/codex",
+                    "html_url": "https://github.com/openai/codex",
+                    "stargazers_count": 1,
+                    "forks_count": 2,
+                    "open_issues_count": 3,
+                    "default_branch": "main",
+                    "language": "Rust",
+                }
+            ),
+            stderr="",
+        )
+
+    monkeypatch.setattr("xone_cli.open_source_eval.urllib.request.urlopen", fail_urlopen)
+    monkeypatch.setattr("xone_cli.open_source_eval.subprocess.run", fake_run)
+
+    metadata = fetch_github_metadata("openai/codex", date(2026, 6, 15))
+
+    assert metadata["source"] == "openai/codex"
+    assert metadata["snapshot_date"] == "2026-06-15"
+    assert metadata["stars"] == 1