major update

app/providers/gemini_sentiment.py

@@ -4,7 +4,10 @@ from __future__ import annotations
 
 import json
 import logging
+import os
+import ssl
 from datetime import datetime, timezone
+from pathlib import Path
 
 from google import genai
 from google.genai import types
@@ -14,6 +17,19 @@ from app.providers.protocol import SentimentData
 
 logger = logging.getLogger(__name__)
 
+# Ensure aiohttp's cached SSL context includes our corporate CA bundle.
+# aiohttp creates _SSL_CONTEXT_VERIFIED at import time; we must patch it
+# after import so that google-genai's aiohttp session trusts our proxy CA.
+_CA_BUNDLE = os.environ.get("SSL_CERT_FILE", "")
+if _CA_BUNDLE and Path(_CA_BUNDLE).exists():
+    try:
+        import aiohttp.connector as _aio_conn
+        if hasattr(_aio_conn, "_SSL_CONTEXT_VERIFIED") and _aio_conn._SSL_CONTEXT_VERIFIED is not None:
+            _aio_conn._SSL_CONTEXT_VERIFIED.load_verify_locations(cafile=_CA_BUNDLE)
+            logger.debug("Patched aiohttp _SSL_CONTEXT_VERIFIED with %s", _CA_BUNDLE)
+    except Exception:
+        logger.warning("Could not patch aiohttp SSL context", exc_info=True)
+
 _SENTIMENT_PROMPT = """\
 Analyze the current market sentiment for the stock ticker {ticker}.
 Search the web for recent news articles, social media mentions, and analyst opinions.
@@ -84,7 +100,7 @@ class GeminiSentimentProvider:
             raise
         except Exception as exc:
             msg = str(exc).lower()
-            if "rate" in msg or "quota" in msg or "429" in msg:
+            if "429" in msg or "resource exhausted" in msg or "quota" in msg or ("rate" in msg and "limit" in msg):
                 raise RateLimitError(f"Gemini rate limit hit for {ticker}") from exc
             logger.error("Gemini provider error for %s: %s", ticker, exc)
             raise ProviderError(f"Gemini provider error for {ticker}: {exc}") from exc