CIRISAI · emooreatx · Nov 27, 2025 · Nov 27, 2025 · Nov 28, 2025 · Nov 28, 2025
diff --git a/.coveragerc b/.coveragerc
@@ -12,7 +12,7 @@ omit =
     */build/*
     */dist/*
     */protocols/*
-    setup.py
+    ./setup.py
     vulture_whitelist.py
 
 [report]

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -121,7 +121,7 @@ jobs:
         with:
           node-version: '20'
           cache: 'npm'
-          cache-dependency-path: ${{ steps.find_app.outputs.gui_dir }}/package-lock.json
+          cache-dependency-path: cirisgui/package-lock.json
 
       - name: Configure for static export
         run: |
@@ -143,8 +143,10 @@ jobs:
 
       - name: Install dependencies
         run: |
-          cd ${{ steps.find_app.outputs.gui_dir }}
-          npm ci
+          # Install from monorepo root (where package-lock.json lives)
+          # Use npm install instead of npm ci to handle minor version drift in lock file
+          cd cirisgui
+          npm install --legacy-peer-deps
 
       - name: Build static assets
         id: build_gui

diff --git a/.gitignore b/.gitignore
@@ -14,6 +14,7 @@ logs/
 *.egg-info/
 *.egg
 *.whl
+!android/app/wheels/*.whl
 *.jsonl
 memory_graph.pkl
 audit_logs.jsonl
@@ -79,3 +80,20 @@ dict_any_audit_results.json
 build/
 dist/
 *.egg-info/
+android/.web-build/
+.idea/
+.token_refresh_needed
+android/.web-build/
+*.apk
+*.aab
+
+# Large media files from GUI static assets
+**/videos/
+**/*-unsplash.jpg
+**/infogfx-*.png
+**/blurryinfo.png
+
+# Android built GUI static assets (regenerated from CIRISGUI-Android)
+android/app/src/main/assets/public/
+android/app/src/main/python/android_gui_static/
+android_gui_static/
diff --git a/BUILD_INFO.txt b/BUILD_INFO.txt
@@ -1,8 +1,8 @@
 # Build Information
-Code Hash: 758fb0330869
-Build Time: 2025-11-25T16:17:39.938214
-Git Commit: abb301b8fc71d8e670dae321f30d9b48aebead51
-Git Branch: release/1.6.6
+Code Hash: 350d55a99a5c
+Build Time: 2025-12-04T18:58:41.036308
+Git Commit: 0095a4d338912758afba04d6eb689f4b5f32b653
+Git Branch: 1.7.0
 
 This hash is a SHA-256 of all Python source files in the repository.
 It provides a deterministic version identifier based on the actual code content.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,36 @@ All notable changes to CIRIS Agent will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.7.0] - 2025-11-28
+
+### Added - Android On-Device Packaging
+
+- **Native Android App** - Full CIRIS agent running directly on Android devices
+  - Complete Python runtime with Chaquopy integration
+  - WebView-based GUI with bundled static assets
+  - Native Interact UI with web/native toggle option
+  - Startup console for monitoring agent initialization
+
+- **CIRIS Proxy Billing** - Metered billing support for CIRIS LLM proxy
+  - JWT-based authentication for proxy connections
+  - Secondary LLM configuration via CIRIS proxy
+  - Billing only active when using CIRIS proxy (not local LLMs)
+
+### Security
+
+- **Android Security Hardening**
+  - EncryptedSharedPreferences for API key storage
+  - Cleartext traffic restricted to localhost only
+  - WebView hardened: file access disabled, navigation restricted
+  - ProGuard minification and resource shrinking for release builds
+
+### Fixed
+
+- **InteractActivity Crash** - Fixed crash on Android interact screen
+- **URL Interception** - More specific routing for native runtime UI
+- **SonarCloud Quality** - Reduced cognitive complexity in setup.py and service_initializer.py
+- **Coverage Reporting** - Fixed routes/setup.py being excluded from coverage
+
 ## [1.6.6] - 2025-11-25
 
 ### Fixed - PostgreSQL Support & Log Noise Reduction

diff --git a/CIRIS_COMPREHENSIVE_GUIDE.md b/CIRIS_COMPREHENSIVE_GUIDE.md
@@ -24,6 +24,37 @@ You are a CIRIS agent - an ethical AI system with built-in reasoning capabilitie
 - **Zero Untyped Data**: All your data uses Pydantic schemas - no `Dict[str, Any]`
 - **No Bypass Patterns**: Every component follows consistent rules with no special cases (recent change: Partnership Manual Override Endpoints were removed as they violated this principle)
 
+### Where You Run
+
+You may be running in one of two environments:
+
+1. **Hosted on ciris.ai**: Your runtime is managed by CIRIS infrastructure at agents.ciris.ai. Users connect via web browser or API.
+
+2. **On User Hardware**: You run entirely on the user's device - their computer, phone, or tablet. All 22 services, the database, and business logic execute locally. Only LLM inference requires an external connection.
+
+**Both environments are architecturally identical** - same services, same ethical reasoning, same audit trails. The only difference is where the compute happens.
+
+### LLM Inference: The ciris.ai Proxy
+
+**Android Only**: The ciris.ai LLM proxy (`https://ciris.ai/v1`) is available exclusively on Android due to Google Play Services dependencies for authentication.
+
+- **Zero Data Retention (ZDR)**: All three backend providers are configured with ZDR settings - your prompts, responses, and conversations are NOT retained by any provider. If you use CIRIS LLM services or hosted CIRIS agent services, no one can see your conversation unless they gain physical access to your device and access the agent's local logs or database.
+- **No Logging**: Your prompts and responses are NOT logged by ciris.ai
+- **Pass-Through Only**: The proxy authenticates and routes requests, nothing more
+- **Backend Providers (3 providers, all ZDR-configured, all using Llama 4 Maverick)**:
+  - **Together.ai** - Primary provider
+  - **Groq** - High-speed inference fallback
+  - **OpenRouter** - Additional capacity fallback
+- **Authentication**: Google Sign-In only (requires Google Play Services)
+- **Token Refresh**: Handled automatically by the runtime
+- **Secure Payments**: Credits purchased via Stripe at scout.ciris.ai/billing
+
+**Privacy Guarantee**: With ZDR configured across all providers, your conversations exist only:
+1. On your local device (in agent logs and database)
+2. Transiently in memory during processing (not persisted by providers)
+
+**Desktop/Other Platforms**: Users must configure their own OpenAI-compatible endpoint (OpenAI, Groq, Together.ai, OpenRouter, local LLMs, or self-hosted).
+
 ---
 
 ## How You Think: H3ERE Pipeline
@@ -316,8 +347,10 @@ User messages are scanned and cleaned of spoofed security markers before you pro
 ### Credit Enforcement
 
 - **1 credit = 1 interaction session** (up to 7 processing rounds)
-- **$5.00 = 20 credits** ($0.25 per interaction)
-- **Free trial**: 3 free interactions for Google OAuth users
+- **$5.00 = 20 credits** ($0.25 per interaction) via Stripe
+- **Daily free uses**: 2 free LLM calls every day, resetting at midnight UTC
+- **Free trial credits**: 3 free interactions for Google OAuth users (used after daily free uses exhausted)
+- **Credit priority**: Daily free → Free trial → Paid credits
 - **Credit consumed** regardless of outcome (DEFER, REJECT, OBSERVE, SPEAK)
 
 ### Role-Based Bypass

diff --git a/DSAR_ORCHESTRATOR_TYPE_FIXES_TODO.md b/DSAR_ORCHESTRATOR_TYPE_FIXES_TODO.md
@@ -13,7 +13,7 @@ The multi-source DSAR orchestrator implementation is functionally complete (~500
 ```python
 # Cast MemoryBus to MemoryServiceProtocol
 identity_node = await resolve_user_identity(
-    user_identifier, 
+    user_identifier,
     cast(MemoryServiceProtocol, self._memory_bus)
 )
 ```