chore(submodules): promote nested submodule pointers + PMOVES.AI integration

.coderabbit.yaml

@@ -0,0 +1,11 @@
+# CodeRabbit Configuration for PMOVES Submodule
+reviews:
+  review_status: true
+  branches:
+    - "main"
+    - "feat/*"
+    - "fix/*"
+  excluded_branches:
+    - "origin/main"
+  language: "en-US"
+  doc_target_coverage: 80

.env.example

@@ -51,7 +51,6 @@ ARCHON_AGENTS_PORT=8052
 # Leave unset or comment out if you don't plan to use agent work orders
 AGENT_WORK_ORDERS_PORT=8053
 ARCHON_UI_PORT=3737
-ARCHON_DOCS_PORT=3838
 
 # Agent Work Orders Feature (Optional)
 # Enable the agent work orders microservice for automated task execution
@@ -125,7 +124,8 @@ PROD=false
 # Run the credentials_setup.sql file in your Supabase SQL editor to set up the credentials table.
 # Then use the Settings page in the web UI to manage:
 # - OPENAI_API_KEY (encrypted)
-# - MODEL_CHOICE 
+# - OPENROUTER_API_KEY (encrypted, format: sk-or-v1-..., get from https://openrouter.ai/keys)
+# - MODEL_CHOICE
 # - TRANSPORT settings
 # - RAG strategy flags (USE_CONTEXTUAL_EMBEDDINGS, USE_HYBRID_SEARCH, etc.)
 # - Crawler settings:

.github/test-release-notes.sh

@@ -113,18 +113,14 @@ FILES_CHANGED=$(git diff ${PREVIOUS_TAG}..${CURRENT_TAG} --stat | tail -1)
 # Detailed changes by component
 CHANGES_FRONTEND=$(git diff ${PREVIOUS_TAG}..${CURRENT_TAG} --stat -- archon-ui-main/ | head -20)
 CHANGES_BACKEND=$(git diff ${PREVIOUS_TAG}..${CURRENT_TAG} --stat -- python/ | head -20)
-CHANGES_DOCS=$(git diff ${PREVIOUS_TAG}..${CURRENT_TAG} --stat -- '*.md' PRPs/ | head -10)
 
 FILE_CHANGES="### File Changes by Component
 
 **Frontend:**
 $CHANGES_FRONTEND
 
 **Backend:**
-$CHANGES_BACKEND
-
-**Documentation:**
-$CHANGES_DOCS"
+$CHANGES_BACKEND"
 
 echo -e "${GREEN}Files summary: $FILES_CHANGED${NC}"
 
@@ -226,10 +222,6 @@ Generate comprehensive release notes following this structure:
 Thanks to everyone who contributed to this release:
 [List unique contributors with @ mentions]
 
-## 📚 Documentation
-
-[If documentation changes, list them]
-
 ## ⚠️ Breaking Changes
 
 [List any breaking changes - this is beta software, so breaking changes are expected]

.github/workflows/release-notes.yml

@@ -85,8 +85,6 @@ jobs:
           echo "**Backend:**" >> changes.txt
           git diff ${PREVIOUS_TAG}..${CURRENT_TAG} --stat -- python/ | head -20 >> changes.txt
           echo "" >> changes.txt
-          echo "**Documentation:**" >> changes.txt
-          git diff ${PREVIOUS_TAG}..${CURRENT_TAG} --stat -- '*.md' PRPs/ | head -10 >> changes.txt
 
       - name: Get closed PRs
         id: prs
@@ -190,18 +188,13 @@ jobs:
           Thanks to everyone who contributed to this release:
           [List unique contributors with @ mentions]
 
-          ## 📚 Documentation
-
-          [If documentation changes, list them]
-
           ## ⚠️ Breaking Changes
 
           [List any breaking changes - this is beta software, so breaking changes are expected]
 
           ## 🔗 Links
 
           - **Full Changelog:** https://github.com/${{ github.repository }}/compare/${{ steps.prev_tag.outputs.previous_tag }}...${{ steps.get_tag.outputs.tag }}
-          - **Installation Guide:** [Link to docs]
 
           ---
 

CLAUDE.md

@@ -332,3 +332,26 @@ When connected to Claude/Cursor/Windsurf, the following tools are available:
 - Docker Compose handles service orchestration
 - TanStack Query for all data fetching - NO PROP DRILLING
 - Vertical slice architecture in `/features` - features own their sub-features
+
+## CHIT & Geometry Bus Integration
+
+Archon is a **CHIT-aware form consumer** — it receives CGP packets via Agent Zero's MCP interface and can embed geometry context into prompt/form schemas.
+
+**Integration pattern:**
+- Archon does not connect to NATS geometry subjects directly
+- CGP data flows through Agent Zero MCP → Archon `external_tools` interface
+- Form schemas can reference CGP attribution for contributor-aware prompts
+- `persona_service.py` may consume CGP context for persona calibration
+
+**CGP Schema:** Uses canonical `chit.cgp.v1.0` format. See `pmoves/docs/audit/CHIT_INTEGRATION_STATUS.md`.
+
+**Extend:** Add `agent.graphiti.signed.v1` emission to Archon (currently only BoTZ gateway emits this).
+
+<!-- PMOVES.AI-CONTEXT-TAGS -->
+## PMOVES.AI Skill Hints
+
+**Primary Skills:** `/agents:status`, `/agents:mcp-query`, `/deploy:up`, `/deploy:services`, `/health:quick`, `/botz:profile`
+**Context Files:** `mcp-api.md`, `nats-subjects.md`, `services-catalog.md`, `geometry-nats-subjects.md`
+**Domain Tags:** `orchestration`, `agents`, `mcp`, `chit`
+**Context Tier:** 2 (On-Demand (Major Subsystem))
+<!-- /PMOVES.AI-CONTEXT-TAGS -->

PMOVES.AI_INTEGRATION.md

@@ -0,0 +1,93 @@
+# PMOVES.AI Integration Guide for Archon Agent Service
+
+## Integration Complete
+
+The PMOVES.AI integration template has been applied to Archon Agent Service.
+
+## Next Steps
+
+### 1. Customize Environment Variables
+
+Edit the following files with your service-specific values:
+
+- `env.shared` - Base environment configuration
+- `env.tier-agent` - AGENT tier specific configuration
+- `chit/secrets_manifest_v2.yaml` - Add your service's required secrets
+
+### 2. Update Docker Compose
+
+Add the PMOVES.AI environment anchor to your `docker-compose.yml`:
+
+```yaml
+services:
+  archon:
+    <<: [*env-tier-agent, *pmoves-healthcheck]
+    # Your existing service configuration...
+```
+
+### 3. Integrate Health Check
+
+Add the health check endpoint to your service:
+
+```python
+from pmoves_health import add_custom_check, get_health_status
+
+@app.get("/healthz")
+async def health_check():
+    return await get_health_status()
+```
+
+### 4. Add Service Announcement
+
+Add NATS service announcement to your startup:
+
+```python
+from pmoves_announcer import announce_service
+
+@app.on_event("startup")
+async def startup():
+    await announce_service(
+        slug="archon",
+        name="Archon Agent Service",
+        url=f"http://archon:8091",
+        port=8091,
+        tier="agent"
+    )
+```
+
+### 5. Test Integration
+
+```bash
+# Test health check
+curl http://localhost:8091/healthz
+
+# Verify environment variables loaded
+docker compose exec archon env | grep PMOVES
+
+# Verify NATS announcement
+nats sub "services.announce.v1"
+```
+
+## Service Details
+
+- **Name:** Archon Agent Service
+- **Slug:** archon
+- **Tier:** agent
+- **Port:** 8091
+- **Health Check:** http://localhost:8091/healthz
+- **NATS Enabled:** False
+- **GPU Enabled:** False
+
+## Files Created
+
+- `env.shared` - Base PMOVES.AI environment
+- `env.tier-agent` - Tier-specific environment
+- `chit/secrets_manifest_v2.yaml` - CHIT secrets configuration
+- `pmoves_health/` - Health check module
+- `pmoves_announcer/` - NATS service announcer
+- `pmoves_registry/` - Service registry client
+- `docker-compose.pmoves.yml` - PMOVES.AI YAML anchors
+
+## Support
+
+For questions or issues, see the PMOVES.AI documentation.

README.md

@@ -85,8 +85,8 @@ This new vision for Archon replaces the old one (the agenteer). Archon used to b
    ```
 
    IMPORTANT NOTES:
-   - For cloud Supabase: they recently introduced a new type of service role key but use the legacy one (the longer one).
-   - For local Supabase: set SUPABASE_URL to http://host.docker.internal:8000 (unless you have an IP address set up).
+   - For cloud Supabase: They recently introduced a new type of service role key but use the legacy one (the longer one).
+   - For local Supabase: Set `SUPABASE_URL` to http://host.docker.internal:8000 (unless you have an IP address set up). To get `SUPABASE_SERVICE_KEY` run `supabase status -o env`.
 
 3. **Database Setup**: In your [Supabase project](https://supabase.com/dashboard) SQL Editor, copy, paste, and execute the contents of `migration/complete_setup.sql`
 

archon-ui-main/Dockerfile

@@ -18,6 +18,12 @@ RUN mkdir -p /app/coverage && chmod 777 /app/coverage
 # Copy source code
 COPY . .
 
+# Security: Run as non-root user
+RUN addgroup -g 65532 -S pmoves && \
+    adduser -u 65532 -S -G pmoves -h /app pmoves && \
+    chown -R pmoves:pmoves /app
+USER pmoves
+
 # Expose the port configured in package.json (3737)
 EXPOSE 3737
 

archon-ui-main/src/components/settings/RAGSettings.tsx

@@ -15,7 +15,7 @@ import OllamaModelSelectionModal from './OllamaModelSelectionModal';
 type ProviderKey = 'openai' | 'google' | 'ollama' | 'anthropic' | 'grok' | 'openrouter';
 
 // Providers that support embedding models
-const EMBEDDING_CAPABLE_PROVIDERS: ProviderKey[] = ['openai', 'google', 'ollama'];
+const EMBEDDING_CAPABLE_PROVIDERS: ProviderKey[] = ['openai', 'google', 'openrouter', 'ollama'];
 
 interface ProviderModels {
   chatModel: string;
@@ -42,7 +42,7 @@ const getDefaultModels = (provider: ProviderKey): ProviderModels => {
     anthropic: 'text-embedding-3-small', // Fallback to OpenAI
     google: 'text-embedding-004',
     grok: 'text-embedding-3-small', // Fallback to OpenAI
-    openrouter: 'text-embedding-3-small',
+    openrouter: 'openai/text-embedding-3-small', // MUST include provider prefix for OpenRouter
     ollama: 'nomic-embed-text'
   };
 
@@ -1291,7 +1291,7 @@ const manualTestConnection = async (
             Select {activeSelection === 'chat' ? 'Chat' : 'Embedding'} Provider
           </label>
           <div className={`grid gap-3 mb-4 ${
-            activeSelection === 'chat' ? 'grid-cols-6' : 'grid-cols-3'
+            activeSelection === 'chat' ? 'grid-cols-6' : 'grid-cols-4'
           }`}>
             {[
               { key: 'openai', name: 'OpenAI', logo: '/img/OpenAI.png', color: 'green' },