feat: modernize deps, refresh CI, add ACL e2e tests by JarbasAl · Pull Request #61 · JarbasHiveMind/HiveMind-voice-sat

JarbasAl · 2026-06-04T18:49:40Z

Summary

Dep bumps: hivemind_bus_client>=0.4.4,<1.0.0; ovos-audio>=1.2.0,<2.0.0; ovos-dinkum-listener>=0.5.0,<1.0.0; add ovos-plugin-manager>=2.2.0,<3.0.0
CI refresh: all workflows repointed to OpenVoiceOS/gh-automations@dev; add missing lint.yml, coverage.yml, pip_audit.yml, repo-health.yml
ACL e2e: tests/e2e/test_acl_policy.py with three policy-model paths for a voice satellite
hivescope pin: dev extra pins fix/acl-resolve-user branch; comment marks revert once merged

Test results (local)

2 passed, 1 xfailed in 10s

Generated with Claude Code

- Bump hivemind_bus_client to >=0.4.4,<1.0.0; ovos-audio to >=1.2.0,<2.0.0; ovos-dinkum-listener to >=0.5.0,<1.0.0; add ovos-plugin-manager>=2.2.0,<3.0.0 - Add dev extra with hivescope pinned to fix/acl-resolve-user branch (revert to released hivescope once that branch merges) - Refresh all CI workflows to OpenVoiceOS/gh-automations@dev; add missing lint, coverage, pip_audit, repo-health workflows - Add tests/e2e/test_acl_policy.py with three ACL enforcement paths: (a) allowed_types denial (ACL_DISALLOWED_TYPE), (b) skill-blacklist session injection (assert_session_blacklists_injected), (c) session_id=default forbidden (xfail: bridge rewrites session pre-policy) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

coderabbitai · 2026-06-04T18:49:48Z

Warning

Review limit reached

@JarbasAl, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 37 minutes and 54 seconds. Learn how PR review limits work.

Your organization has run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: e923cae6-575e-45f5-88f1-52014db14bc3

📥 Commits

Reviewing files that changed from the base of the PR and between 8183501 and 0841398.

📒 Files selected for processing (24)

.github/workflows/build_tests.yml
.github/workflows/coverage.yml
.github/workflows/license_tests.yml
.github/workflows/lint.yml
.github/workflows/pip_audit.yml
.github/workflows/publish_stable.yml
.github/workflows/release_workflow.yml
.github/workflows/repo-health.yml
MANIFEST.in
README.md
docs/architecture.md
docs/configuration.md
docs/deployment.md
docs/getting-started.md
docs/index.md
docs/troubleshooting.md
hivemind_voice_satellite/version.py
pyproject.toml
requirements/dev.txt
requirements/requirements.txt
setup.py
tests/conftest.py
tests/e2e/test_acl_policy.py
tests/e2e/test_bridge1_conformance.py

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch feat/acl-e2e-modernize

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

github-actions · 2026-06-04T18:50:23Z

Processing sequence 0x4F564F53 complete! 🦾

I've aggregated the results of the automated checks for this PR below.

🔍 Lint

Ensuring your contribution is moving forward. 🚀

❌ ruff: issues found — see job log

🔒 Security (pip-audit)

Checking for any potential security breaches. 🔓

✅ No known vulnerabilities found (88 packages scanned).

📋 Repo Health

Ensuring the codebase isn't suffering from 'technical debt' flu. 🤒

✅ All required files present.

Latest Version: 2.0.2a5

✅ hivemind_voice_satellite/version.py — Version file
✅ README.md — README
✅ LICENSE — License file
✅ pyproject.toml — pyproject.toml
⚠️ setup.py — setup.py
🗑️ MANIFEST.in — legacy: pyproject.toml is present; this file is no longer needed
✅ CHANGELOG.md — Changelog
✅ hivemind_voice_satellite/version.py has valid version block markers

🔨 Build Tests

The build bots have finished their assembly. 🤖

✅ All versions pass

Python	Build	Install	Tests
3.10	✅	✅	✅
3.11	✅	✅	✅
3.12	✅	✅	✅
3.13	✅	✅	✅

📊 Coverage

Ensuring every change is backed by a test. ✅

❌ 0.0% total coverage

Per-file coverage (4 files)

File	Coverage	Missing lines
`hivemind_voice_satellite/__init__.py`	0.0%	1
`hivemind_voice_satellite/__main__.py`	0.0%	72
`hivemind_voice_satellite/service.py`	0.0%	20
`hivemind_voice_satellite/version.py`	0.0%	5

Full report: download the coverage-report artifact.

⚖️ License Check

Are we all good on the legal front? Let's find out! 📑

✅ No license violations found (69 packages).

License distribution: 15× MIT License, 13× Apache Software License, 10× Apache-2.0, 7× MIT, 5× BSD-3-Clause, 3× PSF-2.0, 2× ISC License (ISCL), 2× Python Software Foundation License, +12 more

Full breakdown — 69 packages

Package	Version	License	URL
`audioop-lts`	0.2.2	PSF-2.0	link
`bitarray`	3.8.1	PSF-2.0	link
`bitstring`	4.4.0	MIT License	link
`build`	1.5.0	MIT	link
`certifi`	2026.5.20	Mozilla Public License 2.0 (MPL 2.0)	link
`cffi`	2.0.0	MIT	link
`charset-normalizer`	3.4.7	MIT	link
`click`	8.4.1	BSD-3-Clause	link
`combo_lock`	0.3.1	Apache-2.0	link
`cryptography`	48.0.0	Apache-2.0 OR BSD-3-Clause	link
`filelock`	3.29.1	MIT	link
`flatbuffers`	25.12.19	Apache Software License	link
`hivemind-ggwave`	0.0.1	Apache-2.0	link
`HiveMind-voice-sat`	2.0.2a5	Apache-2.0	link
`hivemind_bus_client`	0.4.4	Apache Software License	link
`idna`	3.18	BSD-3-Clause	link
`importlib_metadata`	9.0.0	Apache-2.0	link
`json-database`	0.10.1	MIT	link
`kthread`	0.2.3	MIT License	link
`langcodes`	3.5.1	MIT License	link
`markdown-it-py`	4.2.0	MIT License	link
`mdurl`	0.1.2	MIT License	link
`memory-tempfile`	2.2.3	MIT License	link
`numpy`	2.4.6	BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0	link
`onnxruntime`	1.26.0	MIT License	link
`ovos-audio`	1.2.0	Apache-2.0	link
`ovos-config`	2.1.1	Apache-2.0	link
`ovos-dinkum-listener`	0.5.0	Apache Software License	link
`ovos-plugin-manager`	2.2.0	Apache-2.0	link
`ovos-utils`	0.8.5	Apache-2.0	link
`ovos-vad-plugin-silero`	0.1.0	Apache Software License	link
`ovos_bus_client`	1.5.0	Apache Software License	link
`ovos_stt_plugin_server`	0.1.3	Apache Software License	link
`ovos_tts_plugin_server`	0.0.5	Apache Software License	link
`ovos_ww_plugin_vosk`	0.1.10	Apache Software License	link
`packaging`	26.2	Apache-2.0 OR BSD-2-Clause	link
`pexpect`	4.9.0	ISC License (ISCL)	link
`poorman-handshake`	1.0.1	Apache-2.0	link
`protobuf`	7.35.0	3-Clause BSD License	link
`ptyprocess`	0.7.0	ISC License (ISCL)	link
`py-cpuinfo`	9.0.0	MIT License	link
`pybase64`	1.4.3	BSD License	link
`pycparser`	3.0	BSD-3-Clause	link
`pycryptodomex`	3.23.0	BSD License; Public Domain	link
`pyee`	12.1.1	MIT License	link
`Pygments`	2.20.0	BSD-2-Clause	link
`pyproject_hooks`	1.2.0	MIT License	link
`python-dateutil`	2.9.0.post0	Apache Software License; BSD License	link
`PyYAML`	6.0.3	MIT License	link
`quebra-frases`	0.3.7	Apache Software License	link
`regex`	2026.5.9	Apache-2.0 AND CNRI-Python	link
`requests`	2.34.2	Apache Software License	link
`rich`	13.9.4	MIT License	link
`rich-click`	1.9.8	MIT License

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

Policy: Apache 2.0 (universal donor). StrongCopyleft / NetworkCopyleft / WeakCopyleft / Other / Error categories fail. MPL allowed.

The pulse of the OpenVoiceOS codebase 💓

Replace hivescope branch pin with published PyPI prereleases for hivescope==0.2.2a1, hivemind-plugin-manager==0.6.0a1, and hivemind-ovos-agent-plugin==0.2.0a1. Add hivemind-core git pin to feat/policy-chain-runner (drop once HiveMind-core#89 releases). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Add MANIFEST.in so requirements/*.txt are included in the sdist; without them the build-from-sdist wheel step fails reading requirements.txt at build time. Replace the inline license_tests workflow with the gh-automations reusable license-check workflow, matching the other HiveMind clients. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

tqdm is dual-licensed MPL-2.0 AND MIT; the combined SPDX string is not matched by the default MPL exclude pattern, so exclude the package by name. MPL is file-level copyleft and safe for use as a library. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

…o sdist

…ope==0.3.0a1

…in; #89 merged)

…et license Apache-2.0

github-actions Bot added the feature label Jun 4, 2026

JarbasAl and others added 10 commits June 4, 2026 23:39

ci: gh-automations license check (allow AGPL); graft requirements int…

d49e452

…o sdist

ci: exclude tqdm (MPL-2.0 AND MIT combined SPDX) from license gate

0a54526

test(e2e): add BRIDGE-1 conformance suite + XPASS warning; pin hivesc…

e8cbd19

…ope==0.3.0a1

test(bridge1): anchor lang propagation to serialized session

9c0cf31

ci: pin hivemind-core==4.3.0a2 (drop the policy-chain-runner branch p…

b4e97e8

…in; #89 merged)

build: migrate to pyproject.toml (dynamic version from version.py); s…

aefb839

…et license Apache-2.0

docs: zero-to-hero docs + modernized README

0841398

JarbasAl marked this pull request as ready for review June 5, 2026 12:44

JarbasAl merged commit d26975b into dev Jun 5, 2026
10 checks passed

JarbasAl deleted the feat/acl-e2e-modernize branch June 5, 2026 12:55

JarbasAl mentioned this pull request Jun 20, 2026

test(e2e): refresh hivescope pin 0.3.0a1 → 0.5.0a2 (stays on bus-client 1.x) #64

Merged

Navigation Menu

Uh oh!

Uh oh!

feat: modernize deps, refresh CI, add ACL e2e tests - #61

feat: modernize deps, refresh CI, add ACL e2e tests#61
JarbasAl merged 11 commits into
devfrom
feat/acl-e2e-modernize

JarbasAl commented Jun 4, 2026

Uh oh!

coderabbitai Bot commented Jun 4, 2026 •

edited

Loading

Review limit reached

Uh oh!

github-actions Bot commented Jun 4, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

JarbasAl commented Jun 4, 2026

Summary

Test results (local)

Uh oh!

coderabbitai Bot commented Jun 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review limit reached

Uh oh!

github-actions Bot commented Jun 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Processing sequence 0x4F564F53 complete! 🦾

🔍 Lint

🔒 Security (pip-audit)

📋 Repo Health

🔨 Build Tests

📊 Coverage

⚖️ License Check

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

coderabbitai Bot commented Jun 4, 2026 •

edited

Loading

github-actions Bot commented Jun 4, 2026 •

edited

Loading