From 31847e5caf6931c0f590f0db0c2fc5177c68fa47 Mon Sep 17 00:00:00 2001
From: stxkxs <139715017+stxkxs@users.noreply.github.com>
Date: Fri, 29 May 2026 14:22:45 -0700
Subject: [PATCH 1/4] feat(applicationsets): register slack-knowledge-bot app
 tenant
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Adds apps-tenants.yaml — the ApplicationSet that fans protohype-team app
tenants (now in their own repos) across clusters, mirroring the proven
druid-tenants.yaml idiom (goTemplate matrix: clusters selector × a per-app
list). Each list element carries its own source repo, so onboarding a new
app is one element, not a new ApplicationSet.

First entry: slack-knowledge-bot (https://github.com/nanohype/slack-knowledge-bot,
chart at repo root). Scoped to the operator-reconciled tenant-protohype
AppProject, namespace tenants-protohype, sync-wave 100 (after cluster addons).
CreateNamespace=false — the eks-agent-platform Platform reconciler owns the
namespace. Per-env values resolve via the $values multi-source ref against
chart/values.yaml + chart/values-<environment>.yaml, environment read from
the cluster secret label.
---
 applicationsets/apps-tenants.yaml | 60 +++++++++++++++++++++++++++++++
 1 file changed, 60 insertions(+)
 create mode 100644 applicationsets/apps-tenants.yaml

diff --git a/applicationsets/apps-tenants.yaml b/applicationsets/apps-tenants.yaml
new file mode 100644
index 0000000..a696706
--- /dev/null
+++ b/applicationsets/apps-tenants.yaml
@@ -0,0 +1,60 @@
+apiVersion: argoproj.io/v1alpha1
+kind: ApplicationSet
+metadata:
+  name: apps-tenants
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "100"
+spec:
+  goTemplate: true
+  goTemplateOptions: ["missingkey=error"]
+  generators:
+    - matrix:
+        generators:
+          - clusters:
+              selector:
+                matchLabels:
+                  argocd.argoproj.io/secret-type: cluster
+          - list:
+              elements:
+                # protohype-team apps promoted to their own repos.
+                # Add one element per app; each carries its own source repo.
+                - app: slack-knowledge-bot
+                  repoURL: https://github.com/nanohype/slack-knowledge-bot.git
+                  path: chart
+                  namespace: tenants-protohype
+                  project: tenant-protohype
+  template:
+    metadata:
+      name: '{{ .app }}-{{ index .metadata.labels "environment" }}'
+      annotations:
+        argocd.argoproj.io/sync-wave: "100"
+    spec:
+      project: '{{ .project }}'
+      sources:
+        - repoURL: '{{ .repoURL }}'
+          targetRevision: main
+          path: '{{ .path }}'
+          helm:
+            valueFiles:
+              - $values/{{ .path }}/values.yaml
+              - $values/{{ .path }}/values-{{ index .metadata.labels "environment" }}.yaml
+        - repoURL: '{{ .repoURL }}'
+          targetRevision: main
+          ref: values
+      destination:
+        server: https://kubernetes.default.svc
+        namespace: '{{ .namespace }}'
+      syncPolicy:
+        automated:
+          prune: true
+          selfHeal: true
+        syncOptions:
+          - CreateNamespace=false # Platform reconciler owns the Namespace
+          - ServerSideApply=true
+        retry:
+          limit: 5
+          backoff:
+            duration: 5s
+            factor: 2
+            maxDuration: 3m

From ab8f54e0a859c37ba6fee3d6e9173be6c40de8d3 Mon Sep 17 00:00:00 2001
From: stxkxs <139715017+stxkxs@users.noreply.github.com>
Date: Fri, 29 May 2026 15:11:49 -0700
Subject: [PATCH 2/4] feat(applicationsets): register digest-pipeline app
 tenant
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Adds digest-pipeline (formerly protohype/dispatch — weekly newsletter
pipeline: pipeline CronJob + Fastify api + Next.js web) as a second element in
the apps-tenants list. Same tenant-protohype AppProject / tenants-protohype
namespace / sync-wave 100, chart at the repo root of
github.com/nanohype/digest-pipeline.
---
 applicationsets/apps-tenants.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/applicationsets/apps-tenants.yaml b/applicationsets/apps-tenants.yaml
index a696706..03f21c9 100644
--- a/applicationsets/apps-tenants.yaml
+++ b/applicationsets/apps-tenants.yaml
@@ -24,6 +24,11 @@ spec:
                   path: chart
                   namespace: tenants-protohype
                   project: tenant-protohype
+                - app: digest-pipeline
+                  repoURL: https://github.com/nanohype/digest-pipeline.git
+                  path: chart
+                  namespace: tenants-protohype
+                  project: tenant-protohype
   template:
     metadata:
       name: '{{ .app }}-{{ index .metadata.labels "environment" }}'

From db277f8db85c5176de01687e2295662ad467b96d Mon Sep 17 00:00:00 2001
From: stxkxs <139715017+stxkxs@users.noreply.github.com>
Date: Fri, 29 May 2026 15:45:18 -0700
Subject: [PATCH 3/4] feat(applicationsets): register incident-response app
 tenant
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Adds incident-response (formerly protohype/marshal — ceremonial incident
commander: webhook + processor Deployments) as the third element in the
apps-tenants list. Same tenant-protohype AppProject / tenants-protohype
namespace / sync-wave 100, chart at the repo root of
github.com/nanohype/incident-response.
---
 applicationsets/apps-tenants.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/applicationsets/apps-tenants.yaml b/applicationsets/apps-tenants.yaml
index 03f21c9..1b951a1 100644
--- a/applicationsets/apps-tenants.yaml
+++ b/applicationsets/apps-tenants.yaml
@@ -29,6 +29,11 @@ spec:
                   path: chart
                   namespace: tenants-protohype
                   project: tenant-protohype
+                - app: incident-response
+                  repoURL: https://github.com/nanohype/incident-response.git
+                  path: chart
+                  namespace: tenants-protohype
+                  project: tenant-protohype
   template:
     metadata:
       name: '{{ .app }}-{{ index .metadata.labels "environment" }}'

From 7363e0afff04a0cc042f6f4df582bbcf2042abda Mon Sep 17 00:00:00 2001
From: stxkxs <139715017+stxkxs@users.noreply.github.com>
Date: Fri, 29 May 2026 16:37:51 -0700
Subject: [PATCH 4/4] feat(applicationsets): register competitive-intelligence
 app tenant
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Adds competitive-intelligence (formerly protohype/sigint — competitor-site
semantic-diff radar) as the fourth and final element in the apps-tenants list.
Same tenant-protohype AppProject / tenants-protohype namespace / sync-wave 100,
chart at the repo root of github.com/nanohype/competitive-intelligence. Its
durable pgvector + Aurora substrate is the new landing-zone
competitive-intelligence-platform component.
---
 applicationsets/apps-tenants.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/applicationsets/apps-tenants.yaml b/applicationsets/apps-tenants.yaml
index 1b951a1..ded7274 100644
--- a/applicationsets/apps-tenants.yaml
+++ b/applicationsets/apps-tenants.yaml
@@ -34,6 +34,11 @@ spec:
                   path: chart
                   namespace: tenants-protohype
                   project: tenant-protohype
+                - app: competitive-intelligence
+                  repoURL: https://github.com/nanohype/competitive-intelligence.git
+                  path: chart
+                  namespace: tenants-protohype
+                  project: tenant-protohype
   template:
     metadata:
       name: '{{ .app }}-{{ index .metadata.labels "environment" }}'