diff --git a/AGENTS.md b/AGENTS.md index 3e90e5d..d1ce16d 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -221,6 +221,15 @@ docker build web/ # self-contained build ./scripts/docker-prep.sh --restore # undo ``` +### Corporate Network / Gradle Proxy + +Gradle builds require the `NETWORK` env var and a custom JVM truststore when on the corporate network. The corporate proxy (`cso.proxy.att.com`) does TLS interception, and Gradle's JVM must trust the proxy CA cert. + +- **Automatic:** `switch-network.sh` (sourced from `~/.zshrc`) sets `GRADLE_OPTS` with the truststore when `NETWORK=corp` +- **Verify:** `echo $GRADLE_OPTS` should show `-Djavax.net.ssl.trustStore=...` on corp network +- **Truststore:** `~/.gradle/ssl/gradle-cacerts.jks` (Java cacerts + ATT CSO proxy CA) +- **Full docs:** See `../learning_ai_common_plat/AGENTS.md` ยง 9 (Corporate Network / Proxy Setup) + ## 7. Backend Integration ChronoMind has a **product-specific backend** in `backend/` (Fastify 5, port 4011) plus the shared **platform-service** (port 4003) for auth, billing, flags, etc.