Onboarding Flow Optimization

[0x4007]

Definitions

UbiquiBot - "production instance"
UbiquiBot[dev] - "dev instance"

Secrets

• app_id - should be hardcoded in the app. Make sure to accomodate the dev instance though as technically it has a separate app id.
• open ssh key - this should be ignored by the production instance and required by the dev instance because from what I understand it is necessary to automatically build index.js every time code changes are pushed.

Misc

• The ubiquity-bounties mannequin account should no longer be a dependency. It was a tedious extra step to add it to the partner organization. We should support making "no assignee" the "devpool" mannequin, meaning, if the issue is not assigned to somebody then its considered an open task for the devpool

[0x4007]

Secrets Management

In our bounty-bot repo, we have the production instance, which is useful for comparing stable behavior; running at the same time as the dev instance, which is useful for live development and seeing the latest changes.

• We need to figure out the best way to be able to test stable ("production") vs dev instances of the bot.
• The reason why this could be tricky is because they both use the same code.
• A proposed solution: we need a config in the .yml file to run for the dev instance.

      - name: Invoke the UbiquiBot
        id: UbiquiBot
        uses: ./bin
        with:
          GITHUB_TOKEN: ${{ steps.get_installation_token.outputs.token }}
        env:
          FOLLOW_UP_TIME: '4 days'
          DISQUALIFY_TIME: '7 days'
          DEV: true

[0x4007]

Basically we shouldn't have any more secrets with DEV in the name. Instead, the defaults should be hardcoded in for the production instance, and the existing property names can act as overrides for dev purposes e.g. SUPABASE_PROJECT_KEY instead of SUPABASE_PROJECT_KEY_DEV

[0x4007]

Find	Replace	Comment
SUPABASE_PROJECT_KEY	SUPABASE_KEY	The default should be hardcoded in the app. This can be an override for development work.
SUPABASE_PROJECT_URL	SUPABASE_URL	The default should be hardcoded in the app. This can be an override for development work.
UBIQUITY_BOUNTY_BOT_APP_ID_DEV	UBIQUITY_BOT_APP_ID	The default should be hardcoded in the app. This can be an override for development work.
UBIQUITY_BOUNTY_BOT_DEV_PRIVATE_KEY		Remove
UBIQUITY_BOUNTY_BOT_DEV_PRIVATE_KEY_OPENSSH	UBIQUITY_BOT_SSH_PRIVATE_KEY	This should be ignored by the production instance. We use this for automatically building index.js every time code is pushed, which increases development velocity.
UBIQUITY_BOUNTY_BOT_PRIVATE_KEY_DEV		Remove
SUPABASE_PROJECT_KEY_DEV	SUPABASE_KEY	The default should be hardcoded in the app. This can be an override for development work.
SUPABASE_PROJECT_URL_DEV	SUPABASE_URL	The default should be hardcoded in the app. This can be an override for development work.
UBIQUIBOT_PRIVATE_KEY		Remove
UBIQUITY_BOUNTY_BOT_APP_ID	UBIQUITY_BOT_APP_ID	The default should be hardcoded in the app. This can be an override for development work.
UBIQUITY_BOUNTY_BOT_PRIVATE_KEY	UBIQUITY_BOT_EVM_PRIVATE_KEY	This should be optional and gracefully fallback to say that it is not set whenever payment features are invoked.
-	-	-