feat: fix SSL cert on desktop app (agentscope-ai#1252)

Author: rayrayraykk

scripts/pack/build_common.py

@@ -149,6 +149,18 @@ def main() -> int:
                 f"copaw[full] @ {wheel_uri}",
             ],
         )
+        print("Verifying certifi is installed (required for SSL)...")
+        _run(
+            [
+                conda,
+                "run",
+                "-n",
+                env_name,
+                "python",
+                "-c",
+                "import certifi; print(f'certifi OK: {certifi.where()}')",
+            ],
+        )
         if args.cache_wheels:
             # Store outside dist/ to avoid being deleted by wheel_build cleanup
             wheels_cache = REPO_ROOT / ".cache" / "conda_unpack_wheels"

scripts/pack/build_macos.sh

@@ -64,12 +64,33 @@ LOG="$HOME/.copaw/desktop.log"
 unset PYTHONPATH
 export PYTHONHOME="$ENV_DIR"
 export COPAW_DESKTOP_APP=1
+
+# Set SSL certificate paths for packaged environment
+# Query certifi path from the packaged Python interpreter
+if [ -x "$ENV_DIR/bin/python" ]; then
+  CERT_FILE=$("$ENV_DIR/bin/python" -c \
+    "import certifi; print(certifi.where())" 2>/dev/null)
+  if [ -n "$CERT_FILE" ] && [ -f "$CERT_FILE" ]; then
+    export SSL_CERT_FILE="$CERT_FILE"
+    export REQUESTS_CA_BUNDLE="$CERT_FILE"
+    export CURL_CA_BUNDLE="$CERT_FILE"
+  fi
+fi
+
 cd "$HOME" || true
 if [ ! -t 2 ]; then
   mkdir -p "$HOME/.copaw"
   { echo "=== $(date) CoPaw starting ==="
     echo "ENV_DIR=$ENV_DIR"
     echo "Python: $ENV_DIR/bin/python (exists=$([ -x "$ENV_DIR/bin/python" ] && echo yes || echo no))"
+    echo "SSL_CERT_FILE=${SSL_CERT_FILE:-not set}"
+    if [ -n "$SSL_CERT_FILE" ] && [ -f "$SSL_CERT_FILE" ]; then
+      echo "SSL certificate file found at $SSL_CERT_FILE"
+    elif [ -n "$SSL_CERT_FILE" ]; then
+      echo "WARNING: SSL_CERT_FILE set but file does not exist: $SSL_CERT_FILE"
+    else
+      echo "WARNING: SSL_CERT_FILE not set, SSL connections may fail"
+    fi
   } >> "$LOG"
   exec 2>> "$LOG"
   exec 1>> "$LOG"

scripts/pack/build_win.ps1

@@ -130,6 +130,18 @@ $LauncherBat = Join-Path $EnvRoot "CoPaw Desktop.bat"
 @"
 @echo off
 cd /d "%~dp0"
+
+REM Set SSL certificate paths for packaged environment
+REM Query certifi path from the packaged Python interpreter
+for /f "delims=" %%i in ('"%~dp0python.exe" -c "import certifi; print(certifi.where())" 2^>nul') do set "CERT_FILE=%%i"
+if defined CERT_FILE (
+  if exist "%CERT_FILE%" (
+    set "SSL_CERT_FILE=%CERT_FILE%"
+    set "REQUESTS_CA_BUNDLE=%CERT_FILE%"
+    set "CURL_CA_BUNDLE=%CERT_FILE%"
+  )
+)
+
 if not exist "%USERPROFILE%\.copaw\config.json" (
   "%~dp0python.exe" -m copaw init --defaults --accept-security
 )
@@ -141,11 +153,24 @@ $DebugBat = Join-Path $EnvRoot "CoPaw Desktop (Debug).bat"
 @"
 @echo off
 cd /d "%~dp0"
+
+REM Set SSL certificate paths for packaged environment
+REM Query certifi path from the packaged Python interpreter
+for /f "delims=" %%i in ('"%~dp0python.exe" -c "import certifi; print(certifi.where())" 2^>nul') do set "CERT_FILE=%%i"
+if defined CERT_FILE (
+  if exist "%CERT_FILE%" (
+    set "SSL_CERT_FILE=%CERT_FILE%"
+    set "REQUESTS_CA_BUNDLE=%CERT_FILE%"
+    set "CURL_CA_BUNDLE=%CERT_FILE%"
+  )
+)
+
 echo ====================================
 echo CoPaw Desktop - Debug Mode
 echo ====================================
 echo Working Directory: %cd%
 echo Python: "%~dp0python.exe"
+echo SSL_CERT_FILE: %SSL_CERT_FILE%
 echo.
 if not exist "%USERPROFILE%\.copaw\config.json" (
   echo [Init] Creating config...