Claude Code v2.1.201 Bun binary SSL failure: UNABLE_TO_GET_ISSUER_CERT on macOS

Bug Description

Claude Code extension v2.1.201 (VS Code / Antigravity IDE) fails to connect to the Anthropic API with UNABLE_TO_GET_ISSUER_CERT SSL error on macOS. Rolling back to v2.1.59 resolves the issue.

Environment

• OS: macOS (Darwin 25.0.0, Apple Silicon arm64)
• IDE: Antigravity IDE (VS Code fork)
• Extension version (broken): anthropic.claude-code@2.1.201 (darwin-arm64)
• Extension version (working): anthropic.claude-code@2.1.59
• No VPN/proxy active — verified with scutil --proxy and curl -v https://api.anthropic.com

Root Cause

v2.1.59 ships as a Node.js script (/usr/bin/env node) which uses the system's SSL/TLS stack (macOS SecTrust).

v2.1.201 ships as a native Bun binary (Mach-O 64-bit executable arm64) at resources/native-binary/claude with its own embedded BoringSSL CA store. This embedded CA store appears to be missing the root CA required to verify api.anthropic.com's certificate chain.

Error Logs

From Antigravity IDE/logs/.../Anthropic.claude-code/Claude VSCode.log:

[ERROR] API error (attempt 1/11): undefined Connection error.
[ERROR] Error in API request: Connection error.
[ERROR] Connection error details: code=UNABLE_TO_GET_ISSUER_CERT (SSL error), message=unable to get issuer certificate
[ERROR] "Error: Error: Connection error.\n    at makeRequest (/$bunfs/root/src/entrypoints/cli.js:52:6797)\n    at processTicksAndRejections (native:7:39)"

Telemetry and metrics export also fail with the same error:

[ERROR] 1P event logging: 29 events failed to export (code=UNABLE_TO_GET_ISSUER_CERT, unable to get issuer certificate)
[ERROR] BigQuery metrics export failed: unable to get issuer certificate

Verification

| Test | Result |
|------|--------|
| curl -v https://api.anthropic.com/v1/messages | TLS 1.3 handshake succeeds (uses macOS SecTrust) |
| curl --ipv4 / curl --ipv6 | Both succeed |
| System proxy (scutil --proxy) | No proxy configured |
| NODE_EXTRA_CA_CERTS | Unset — no interference |
| Claude CLI v2.1.59 from terminal | Works perfectly |
| Claude Code extension v2.1.201 in IDE | Fails with UNABLE_TO_GET_ISSUER_CERT |

Workaround

Downgrade the extension:

code --install-extension Anthropic.claude-code@2.1.59

(Replace code with your IDE's CLI, e.g., antigravity-ide)

Expected Behavior

The native Bun binary in v2.1.201 should either:

1. Use the macOS system trust store (SecTrust / Keychain) instead of an embedded CA bundle, or
2. Ship with a complete/up-to-date CA bundle that includes all root CAs needed for api.anthropic.com

Additional Context

• The extension auto-updated from 2.1.59 → 2.1.201 on July 5, 2026 at 18:46 local time
• The issue is 100% reproducible — every API call fails
• file on the binary confirms it's a native Mach-O arm64 executable (Bun), not a Node.js script
• Setting NODE_EXTRA_CA_CERTS to a macOS system cert export did NOT fix it (Bun may not respect this env var the same way Node.js does)