⬆️ Bump the uv group across 1 directory with 7 updates - #190
Closed
dependabot[bot] wants to merge 2 commits into
Closed
⬆️ Bump the uv group across 1 directory with 7 updates#190dependabot[bot] wants to merge 2 commits into
dependabot[bot] wants to merge 2 commits into
Conversation
…ode graph, and device tools (#198) ## New features ### 📱 Mewbo Aura — a native Android assistant client A Kotlin + Jetpack Compose client over the existing session REST/SSE API, taken from v1 through v5: - **Assistant overlay, text and voice.** Invoke-from-anywhere overlay with app handoff. The voice-first flow auto-listens on trigger, streams the first reply in-overlay as a card, and hands off to the app from the second turn. Live composer dictation and chunked speak-along voice replies. - **Chat surface.** Streaming markdown transcript with folded tool-call cards, attachment tiles above the user query, a project-scoped MCP catalog with a server-grouped tool picker, a date-grouped Recents rail, and long-press session actions (rename + archive). - **Design language.** Aurora shader family rebuilt against real-device captures with a solid-rest contract, drawer navigation, measured dark parity, and a compact turn-aware transcript rhythm. - **Device tools.** Time, battery, alarm, timer, and wake, plus SMS read/send and alarm management gated solely by the OS runtime-permission flow. - **Distribution flavors.** `public` (platform trust only, the flavor CI ships) and `enterprise` (bakes a deployment-supplied private root CA for LAN/enterprise backends; cert seeded at build time, never committed). *(apps/mewbo_aura, packages/mewbo_core, apps/mewbo_api, apps/mewbo_console)* ### 🖥️ A full-Textual terminal UI The old four-stack terminal UI collapses into one Textual `MewboApp`, eliminating the Live-vs-Textual render race. It brings an event-driven streaming transcript over the `AgentTranscriptHub`, a selectable agent-fleet drill-in beside a faceted sidebar, plan approval as a bordered card with a selectable modal (no slash commands), a live plan/todo progress dock, an activity spinner with footer token throughput, and dedicated transcript cards for orchestration tools. CLI local-first adds opt-in remote session sync and product tools surfaced through the Mewbo MCP. *(apps/mewbo_cli, packages/mewbo_core)* ### 🕸️ Multi-language code graph and the 3D Code Galaxy CodeGraph schema v2 lands: closed structural kinds plus open subkinds and namespaced attributes, validated on both the full index and refresh deltas. Kotlin and Java join the AST graph. The wiki gains a shared 3D Code Galaxy view, faithful scip-python symbol resolution, a zero-LLM graph-only developer mode, branch selection in the onboarding wizard, and idempotent Q&A answer URLs with bounded, ranked cited sources. Graph rendering unifies on one 3D engine; Cytoscape is removed. *(packages/mewbo_graph, apps/mewbo_api, apps/mewbo_console)* ### 📎 Rich attachments and client device tools Attachments persist on the user event and render as cards above the user query across the console, Aura, and MCP session history, with the image payload carried on the context event for vision. Client-declared device tools ride a session-tool bridge with a dispatch round-trip and an SSE executor; a product-tool catalog derives request-scoped capabilities; and a shared tool-scope classifier surfaces tool scope in the console picker, the CLI `/mcp` command, and the composer. *(packages/mewbo_core, apps/mewbo_api, apps/mewbo_console, apps/mewbo_aura, apps/mewbo_mcp)* ### 🤖 Bot-authored PRs on issue pickup The vcs-pickup issue prompt bakes a `Closes #<n>` keyword so a merged pickup PR closes its originating issue, and the tea CLI ships in the API runtime so the bot can author those PRs directly. *(apps/mewbo_api, docker)* ## Stability and fixes - **Aura:** device-tool execution decouples from the shared SSE flow with restartable streams and honest background/stale/detach handling; errors surface as failed steps through a shared envelope and duplicate tool ids are rejected; ViewModel state stops collecting past the Activity lifecycle; `CancellationException` rethrows before any degrade; Keystore encrypt/decrypt pins off the caller's dispatcher; an unreadable attachment fails loud instead of dropping silently; streaming markdown de-flickers via render-state retention plus a reparse throttle. - **Engine and CLI:** the shell tool runs non-interactively with a pager-safe env and process-group reap; the watchdog names the in-flight tool and skips root self-stall injection; TaskQueue accepts internal tool ids so a clean completion leaves no error residue; the context gauge reads the live per-call context rather than cumulative session tokens; transcript-hub sink calls defer outside the state lock. - **Wiki:** Q&A goes greedy graph-first with a self-approving QA surface and file/graph citations, forcing the answer through `wiki_emit_block` instead of a discarded terminal reply; config resolves by walking up to the project root; tree-sitter grammars load on demand. *(apps/mewbo_aura, packages/mewbo_core, packages/mewbo_tools, packages/mewbo_graph, apps/mewbo_api, apps/mewbo_cli)* ## Docs and infrastructure - Docs restructure into per-client tabs (Terminal, Web, Android, API) with section-scoped sidebars and a shortlisted footer; raw-HTML media paths fixed on section subpages; the Aura enterprise flavor gets an asset reorg and visual examples. - Repository hygiene: docs, comments, and config templates now use deployment-neutral placeholders (example hostnames, env-driven paths, a generic enterprise-CA resource name) and product-neutral wording in design-lineage comments; the console dev server reads allowed hosts exclusively from `VITE_ALLOWED_HOSTS`. - CI: the Aura release workflow builds the public flavor only. *(.github/workflows, docs, apps/mewbo_aura, apps/mewbo_console)* Co-authored-by: mewbo-ai[bot] <268600793+mewbo-ai[bot]@users.noreply.github.com>
--- updated-dependencies: - dependency-name: pytest dependency-version: 9.0.3 dependency-type: direct:development dependency-group: uv - dependency-name: langchain dependency-version: 1.3.9 dependency-type: direct:production dependency-group: uv - dependency-name: aiohttp dependency-version: 3.14.1 dependency-type: direct:production dependency-group: uv - dependency-name: cryptography dependency-version: 48.0.1 dependency-type: indirect dependency-group: uv - dependency-name: langsmith dependency-version: 0.8.18 dependency-type: indirect dependency-group: uv - dependency-name: pydantic-settings dependency-version: 2.14.2 dependency-type: indirect dependency-group: uv - dependency-name: starlette dependency-version: 1.3.1 dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ✅ Deployment successful! View logs |
mewbo-docs-discovery | 214f0d8 | Jul 10 2026, 10:06 PM |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #190 +/- ##
==========================================
+ Coverage 92.05% 92.28% +0.23%
==========================================
Files 87 89 +2
Lines 15110 15375 +265
==========================================
+ Hits 13909 14189 +280
+ Misses 1201 1186 -15
🚀 New features to boost your workflow:
|
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.