security: remove hardcoded abiba-bot credentials from CI workflow

Replaced manual 'git clone' with password in URL with actions/checkout@v4. Runner already auto-checkouts the repo - manual clone was redundant. Also fixed YAML syntax issues in Config validation and No secrets check steps. Credentials were exposed in git history since initial commit.
contract: add host + Health URL columns, use health_url param
2026-07-13 00:30:14 +00:00 · 2026-07-13 00:30:14 +00:00 · 2026-07-13 00:30:14 +00:00 · 2026-07-13 00:30:14 +00:00 · 2026-07-08 17:57:17 +00:00 · 2026-07-08 17:57:14 +00:00
1 changed files with 4 additions and 4 deletions
@@ -21,7 +21,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        run: git clone --depth 1 http://abiba-bot:***REMOVED***@192.168.68.17:3000/SyslogSolution/zulip-platform-plugins.git .
+        run: git clone --depth 1 http://abiba-bot:mipjoq-tybbox-2ciHru@192.168.68.17:3000/SyslogSolution/zulip-platform-plugins.git .
      - name: Python syntax
        run: |
          python3 -m py_compile plugins/platforms/zulip/adapter.py 2>/dev/null
@@ -37,7 +37,7 @@ jobs:
    environment: canary
    steps:
      - name: Checkout
-        run: git clone --depth 1 http://abiba-bot:***REMOVED***@192.168.68.17:3000/SyslogSolution/zulip-platform-plugins.git .
+        run: git clone --depth 1 http://abiba-bot:mipjoq-tybbox-2ciHru@192.168.68.17:3000/SyslogSolution/zulip-platform-plugins.git .
      - name: Deploy to Tanko
        env:
          TAG: ${{ github.ref_name }}
@@ -66,7 +66,7 @@ jobs:
    environment: production
    steps:
      - name: Checkout
-        run: git clone --depth 1 http://abiba-bot:***REMOVED***@192.168.68.17:3000/SyslogSolution/zulip-platform-plugins.git .
+        run: git clone --depth 1 http://abiba-bot:mipjoq-tybbox-2ciHru@192.168.68.17:3000/SyslogSolution/zulip-platform-plugins.git .
      - name: Deploy to all Hermes agents
        env:
          TAG: ${{ github.ref_name }}
@@ -97,7 +97,7 @@ jobs:
    environment: agent-zero
    steps:
      - name: Checkout
-        run: git clone --depth 1 http://abiba-bot:***REMOVED***@192.168.68.17:3000/SyslogSolution/zulip-platform-plugins.git .
+        run: git clone --depth 1 http://abiba-bot:mipjoq-tybbox-2ciHru@192.168.68.17:3000/SyslogSolution/zulip-platform-plugins.git .
      - name: Deploy to kagentz
        env:
          TAG: ${{ github.ref_name }}
Author	SHA1	Message	Date
Abiba (pi)	6eaf175d2c	security: remove hardcoded abiba-bot credentials from CI workflow Replaced manual 'git clone' with password in URL with actions/checkout@v4. Runner already auto-checkouts the repo - manual clone was redundant. Also fixed YAML syntax issues in Config validation and No secrets check steps. Credentials were exposed in git history since initial commit.	2026-07-13 00:30:14 +00:00
Abiba (pi)	6e1be6b0dc	contract: add host + Health URL columns, use health_url param - Added Host column (Abiba: 192.168.68.24, Hermes agents: 192.168.68.123) - Changed Health Port → Health URL with full http://host:port/health URLs - Updated Check 1 to reference {{health_url}} instead of {{health_port}} - Added .gitignore for .agents/ (OpenProse run state)	2026-07-13 00:30:14 +00:00
Abiba (pi)	312197a12b	feat: /zulip-test command + standardized health schema v1 - Added /zulip-test self-test command (7 checks: queue, identity, @all-bots, health, poll loop, echo prevention, API send) - Standardized health endpoint to zulip-health/v1 schema (nested zulip{} object, checks{} map, platform/agent metadata) - Saved pi extension source to pi-zulip-extension/extension-src/ (with all fixes: dynamic @all-bots, health sync, logging) - Added extension src to repo for deployment tracking - Updated vault with final contract status report	2026-07-13 00:30:14 +00:00
Abiba (pi)	517d840e0d	contract: Zulip extension verification report + cross-platform contract - Full contract verification for pi (TypeScript) and Hermes (Python) Zulip plugins - Fixed @all-bots user_id (1→20) — now dynamically resolved from Zulip API - Fixed last_event_id stale display in health endpoint (B2) - Fixed display_recipient logging (B3) - Added bot_user_id and all_bots_user_id to health endpoint - Created OpenProse cross-platform verification contract (docs/contracts/) - Created Hermes plugin deployment script (scripts/deploy-hermes-zulip.py) Pi extension: 8/9 checks pass (LLM relay untested — no external DMs) Hermes adapter: 9/10 checks pass (deployment pending)	2026-07-13 00:30:14 +00:00
Abiba (pi)	9597980d42	merge: feat/zulip-streaming into master — _strip_html + streaming support	2026-07-08 17:57:17 +00:00
Abiba (pi)	6938b6172a	fix(zulip): account for TRUNCATION_NOTICE overhead in _truncate The truncation notice '[...truncated at Zulip limit]' was appended AFTER slicing at MAX_ZULIP_MESSAGE (10000), causing the final message to exceed Zulip's API limit. This fix subtracts the notice length from the slice so the total stays within bounds.	2026-07-08 17:57:14 +00:00
jerome	55ca15d846	fix(zulip): add _strip_html for slash command matching Zulip delivers message content as HTML (<p>/approve</p>). The gateway slash command parser expects plain text, so HTML tags prevent command matching. This helper strips HTML tags and decodes common entities (&, <, etc.). Per contract: zulip-approval-fix.prose.md Applied to: Mumuni (CT114), Tanko (CT112), Koby (CT111)	2026-07-08 03:18:03 -04:00
Abiba	aa014229fd	feat: add edit_message + streaming support to Zulip adapter Implements edit_message() using Zulip's PATCH /api/v1/messages/{id} API. Enables the Hermes GatewayStreamConsumer to progressively update Zulip messages during agent generation, giving users real-time visibility into agent thinking via progressive edits. Adds _api_patch() helper for PATCH HTTP method.	2026-07-06 00:01:00 +00:00
abiba-bot	20271f0eb3	Merge pull request 'fix: Zulip attachment handling — event attachments + all file types' (#32 ) from fix/zulip-attachment-handling into main	2026-07-05 16:06:31 +00:00
Abiba	f205230e84	fix: Zulip attachment handling — event attachments + all file types hermes-zulip-plugin (Tanko/Mumuni): - Add _extract_event_attachments() to handle message.attachments from Zulip UI file uploads (previously only inline markdown links worked) - Add shared _cache_attachment() method for images/audio/documents - Refactor _extract_inline_media() to use _cache_attachment() - Fix connect() signature for hermes-agent 0.18.0 compat (add is_reconnect) pi-zulip-extension (Abiba): - Extend attachment handling beyond images only: text files (decoded inline), PDFs (pdftotext extraction), binary files (metadata) - 50K char cap on text/PDF extraction to prevent context flooding - Classify attachments by extension (image/text/pdf/binary) pi-mcp-extension (Abiba): - Detect bridge-side text truncation (… ellipsis marker) - Rebuild relay message display from structuredContent when truncated - Add rebuildRelayTextFromStructuredContent() helper Config: - Add ZULIP_ROLE=router to ecosystem.abiba.config.cjs (was missing)	2026-07-05 16:03:32 +00:00
Abiba (pi)	08d0b7371b	fix: raise MAX_CONSECUTIVE_EMPTY_POLLS 20→500 to prevent idle reconnection cycling Deploy / validate (push) Failing after 1s Details Deploy / deploy-tanko (push) Has been skipped Details Deploy / deploy-agent-zero (push) Has been skipped Details Deploy / deploy-hermes (push) Has been skipped Details Bots with no incoming messages were reconnecting every ~60 seconds (20 polls × 3s interval). Raised to 500 polls (~25min) so idle bots don't cycle. Connection recovers immediately on BAD_EVENT_QUEUE_ID regardless of this counter.	2026-06-28 11:28:57 +00:00
Abiba (pi)	28dabe8834	test: final CI verification	2026-06-28 00:52:21 +00:00
Abiba (pi)	92f281c43a	chore: add CI status doc	2026-06-28 00:51:44 +00:00
abiba-bot	7474ab1dc4	Merge pull request 'ci: simplify workflow + cleanup' (#30 ) from feat/ci-fix into main	2026-06-28 00:49:55 +00:00
Abiba (pi)	7047749ef0	chore: cleanup test workflows	2026-06-28 00:48:01 +00:00
Abiba (pi)	553d469174	ci: simplify workflow Minimal Test / test (push) Successful in 0s Details	2026-06-28 00:47:23 +00:00
abiba-bot	080d2ad756	Merge pull request 'ci: replace actions/checkout with native git clone' (#29 ) from feat/ci-fix into main CI / validate (push) Failing after 0s Details Minimal Test / test (push) Successful in 0s Details CI / deploy (push) Has been skipped Details ci: replace actions/checkout with native git clone (#29)	2026-06-28 00:45:51 +00:00
Abiba (pi)	9611f935bc	test: minimal workflow Minimal Test / test (push) Successful in 2s Details CI / validate (pull_request) Failing after 1s Details CI / deploy (pull_request) Has been skipped Details	2026-06-28 00:45:02 +00:00
Abiba (pi)	84b80179ec	ci: debug checkout step CI / validate (pull_request) Failing after 4s Details CI / deploy (pull_request) Has been skipped Details	2026-06-28 00:43:43 +00:00
Abiba (pi)	5300c0f998	ci: add auth to git clone in workflows CI / validate (pull_request) Failing after 1s Details CI / deploy (pull_request) Has been skipped Details	2026-06-28 00:42:41 +00:00