Add CI secrets

[Nash0x7E2]

Summary by CodeRabbit

• Chores

  • CI test workflow now injects environment variables for multiple third‑party integrations, aligning the test environment with production.

• Tests

  • Reworked a realtime audio test to use a shared fixture for greater consistency and reduced flakiness.
  • Added synchronous waits in two integration tests to ensure event processing completes before assertions.

[coderabbitai]

Walkthrough

Adds CI env variables to .github/workflows/run_tests.yml, refactors a realtime test to use the shared realtime fixture instead of realtime2, and adds synchronous waits for event processing in two XAI integration tests to wait for llm.events. No other behavior changes.

Changes

Cohort / File(s)	Summary
CI workflow env vars \.github/workflows/run_tests.yml	Adds an env block to the test job wiring multiple GitHub Secrets into the CI environment: ANTHROPIC_API_KEY, CARTESIA_API_KEY, DEEPGRAM_API_KEY, ELEVENLABS_API_KEY, FAL_KEY, GOOGLE_API_KEY, OPENAI_API_KEY, OPENAI_MODEL, STREAM_API_KEY, STREAM_API_SECRET, XAI_API_KEY. No other steps or control flow changed.
Realtime test fixture refactor plugins/gemini/tests/test_gemini_realtime.py	Updates test_audio_sending_flow signature to accept and use the existing realtime fixture (was realtime2), replacing all realtime2 references with realtime. No behavioral change beyond fixture reuse.
XAI tests: wait for event processing plugins/xai/tests/test_xai_llm.py	Adds synchronous waits for llm.events in two integration tests (test_memory and test_native_memory) after sending responses to ensure event processing completes before continuing. No other test logic changed.

Sequence Diagram(s)

sequenceDiagram
  autonumber
  participant Dev as Developer
  participant GH as GitHub Actions
  participant WF as run_tests.yml Job
  participant Sec as GitHub Secrets
  participant Env as Job Env
  participant TR as Test Runner

  Dev->>GH: Push / PR
  GH->>WF: Start test workflow
  WF->>Sec: Read required secrets
  Sec-->>WF: Secret values
  WF->>Env: Populate env (API keys, model)
  note right of Env #D3E4CD: Newly added env variables
  WF->>TR: Run tests
  TR-->>GH: Report results

Loading

sequenceDiagram
  autonumber
  participant Test as Test
  participant Realtime as Realtime Fixture
  participant LLM as LLM (events)

  Test->>Realtime: use fixture for audio flow
  Realtime-->>Test: send/receive responses
  Test->>LLM: send simple/create response
  note right of LLM #FDEBD0: New explicit wait added
  Test->>LLM: wait for llm.events
  LLM-->>Test: events processed
  Test-->>Test: continue assertions

Loading

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Poem

In the cool belly of CI I taste keys like tin,
secret fruit threaded through a breathless machine.
One fixture slides into another's quiet,
and the waiting—small, deliberate—collects like ash.
Tests keep their white rooms and the lamps go on.

Pre-merge checks and finishing touches

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	You can run @coderabbitai generate docstrings to improve docstring coverage.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title Check	✅ Passed	The title succinctly conveys the primary change of adding CI secrets to the workflow configuration, directly reflecting the main modification in the pull request without extraneous detail.

✨ Finishing touches

• 📝 Generate docstrings

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch chore/ci-env

---

📜 Recent review details

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 01dcf20 and 26bb4dc.

📒 Files selected for processing (1)

• plugins/xai/tests/test_xai_llm.py (2 hunks)

🧰 Additional context used

📓 Path-based instructions (1)

**/*.py

📄 CodeRabbit inference engine (.cursor/rules/python.mdc)

**/*.py: Never adjust sys.path (e.g., sys.path.append/insert/assignment)
Docstrings must follow the Google style guide

Files:

• plugins/xai/tests/test_xai_llm.py

🧬 Code graph analysis (1)

plugins/xai/tests/test_xai_llm.py (1)

agents-core/vision_agents/core/events/manager.py (1)

• wait (406-417)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (6)

• GitHub Check: integration / Test "integration"
• GitHub Check: integration / Ruff & mypy
• GitHub Check: unit / Test "not integration"
• GitHub Check: unit / Ruff & mypy
• GitHub Check: unit / Ruff & mypy
• GitHub Check: unit / Test "not integration"

🔇 Additional comments (2)

plugins/xai/tests/test_xai_llm.py (2)

81-81: LGTM! Synchronization ensures proper memory context.

The wait ensures the first message's events are fully processed before sending the follow-up question, which is essential for testing conversation memory.

---

94-94: LGTM! Synchronization ensures proper memory context.

Consistent with line 81, this wait ensures the first message's events are fully processed before testing memory retention.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

📜 Review details

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 3739605 and c5395ec.

📒 Files selected for processing (1)

• .github/workflows/run_tests.yml (1 hunks)

🧰 Additional context used

🪛 actionlint (1.7.7)

.github/workflows/run_tests.yml

32-32: property "anthropic_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

33-33: property "cartesia_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

34-34: property "deepgram_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

35-35: property "elevenlabs_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

36-36: property "fal_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

37-37: property "google_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

38-38: property "openai_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

39-39: property "openai_model" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

40-40: property "stream_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

41-41: property "stream_api_secret" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

42-42: property "xai_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (4)

• GitHub Check: integration / Test "integration"
• GitHub Check: integration / Ruff & mypy
• GitHub Check: unit / Ruff & mypy
• GitHub Check: unit / Ruff & mypy

[coderabbitai]

⚠️ Potential issue | 🔴 Critical

Declare the required secrets for this reusable workflow.

Because workflow_call currently exposes no secrets (secrets: {}), every ${{ secrets.* }} reference here resolves to an empty string at runtime. The CI job will therefore boot without the keys you expect, and any step needing them will fail (actionlint is already flagging this). Define the secrets under on.workflow_call.secrets (or set secrets: inherit) so callers can pass them through.

 on:
   workflow_call:
-    inputs:
-      marker:
-        description: 'pytest -m expression (e.g., `not integration` or `integration`)'
-        required: true
-        type: string
-    secrets: {}
+    inputs:
+      marker:
+        description: 'pytest -m expression (e.g., `not integration` or `integration`)'
+        required: true
+        type: string
+    secrets:
+      ANTHROPIC_API_KEY:
+        required: true
+      CARTESIA_API_KEY:
+        required: true
+      DEEPGRAM_API_KEY:
+        required: true
+      ELEVENLABS_API_KEY:
+        required: true
+      FAL_KEY:
+        required: true
+      GOOGLE_API_KEY:
+        required: true
+      OPENAI_API_KEY:
+        required: true
+      OPENAI_MODEL:
+        required: true
+      STREAM_API_KEY:
+        required: true
+      STREAM_API_SECRET:
+        required: true
+      XAI_API_KEY:
+        required: true

📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

	env:
	ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
	CARTESIA_API_KEY: ${{ secrets.CARTESIA_API_KEY }}
	DEEPGRAM_API_KEY: ${{ secrets.DEEPGRAM_API_KEY }}
	ELEVENLABS_API_KEY: ${{ secrets.ELEVENLABS_API_KEY }}
	FAL_KEY: ${{ secrets.FAL_KEY }}
	GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
	OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
	OPENAI_MODEL: ${{ secrets.OPENAI_MODEL }}
	STREAM_API_KEY: ${{ secrets.STREAM_API_KEY }}
	STREAM_API_SECRET: ${{ secrets.STREAM_API_SECRET }}
	XAI_API_KEY: ${{ secrets.XAI_API_KEY }}
	on:
	workflow_call:
	inputs:
	marker:
	description: 'pytest -m expression (e.g., `not integration` or `integration`)'
	required: true
	type: string
	secrets:
	ANTHROPIC_API_KEY:
	required: true
	CARTESIA_API_KEY:
	required: true
	DEEPGRAM_API_KEY:
	required: true
	ELEVENLABS_API_KEY:
	required: true
	FAL_KEY:
	required: true
	GOOGLE_API_KEY:
	required: true
	OPENAI_API_KEY:
	required: true
	OPENAI_MODEL:
	required: true
	STREAM_API_KEY:
	required: true
	STREAM_API_SECRET:
	required: true
	XAI_API_KEY:
	required: true

🧰 Tools

🪛 actionlint (1.7.7)

32-32: property "anthropic_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

33-33: property "cartesia_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

34-34: property "deepgram_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

35-35: property "elevenlabs_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

36-36: property "fal_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

37-37: property "google_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

38-38: property "openai_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

39-39: property "openai_model" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

40-40: property "stream_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

41-41: property "stream_api_secret" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

---

42-42: property "xai_api_key" is not defined in object type {actions_runner_debug: string; actions_step_debug: string; github_token: string}

(expression)

🤖 Prompt for AI Agents

.github/workflows/run_tests.yml around lines 31-42: the workflow references
multiple secrets via `${{ secrets.* }}` but `workflow_call` currently exposes no
secrets so those values are empty at runtime; update the reusable workflow to
declare each secret under `on.workflow_call.secrets` (or set `secrets: inherit`)
so callers can pass them through — add entries for ANTHROPIC_API_KEY,
CARTESIA_API_KEY, DEEPGRAM_API_KEY, ELEVENLABS_API_KEY, FAL_KEY, GOOGLE_API_KEY,
OPENAI_API_KEY, OPENAI_MODEL, STREAM_API_KEY, STREAM_API_SECRET, XAI_API_KEY,
and ensure callers supply the secrets when invoking the workflow.