[Luna1xiao]

Python from python.org on macOS does not pre-install SSL certificates, causing all HTTPS feed fetches to fail with:
SSL: CERTIFICATE_VERIFY_FAILED - unable to get local issuer certificate

Fix by using the certifi package (already a transitive dependency via httpx) to provide a reliable certificate bundle across all platforms.

• fetcher.py: use ssl.create_default_context(cafile=certifi.where()) for HTTPS
• pyproject.toml: add certifi as direct dependency

Summary

Module

• backend/feed_engine
• backend/db
• backend/content_cleaner
• backend/agent_summary
• backend/agent_translation
• backend/llm_providers
• backend/app (tech lead)
• packages/ui
• packages/shared-types (tech lead)
• packages/ipc-client (tech lead)
• apps/desktop
• docs / CI / governance

Checklist

• Tests added or updated
• uv run ruff check and uv run pytest pass locally (if backend)
• pnpm typecheck passes locally (if frontend)
• Pydantic model changed → ran pnpm gen:types and committed packages/shared-types/src/generated.ts
• New endpoint → updated docs/ipc-contract.md
• Coding Agent used → committed a trace under .agent-traces/

Coding Agent Trace

Notes for Reviewers